WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-122✕
Overview 14 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 EPSS ≥ 0.5
14matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 14 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 13 92.9% Medium 1 7.1% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 14 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 14 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 5 / year
Not applicable: 14 Medium: 1High: 13 not blocked: 14 Working exploit published: 14
20183 Not applicable3 High2 Medium1 not blocked3 Working exploit published3 20190 20200 20210 20220 20231 Not applicable1 High1 not blocked1 Working exploit published1 20243 Not applicable3 High3 not blocked3 Working exploit published3 20255 Not applicable5 High5 not blocked5 Working exploit published5 20262 Not applicable2 High2 not blocked2 Working exploit published2
201820192020202120222023202420252026
14 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-21248 High 2026-02-10 Not applicable Working exploit published Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-21244 High 2026-02-10 Not applicable Working exploit published Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2025-59254 High 2025-10-14 Not applicable Working exploit published Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2025-49744 High 2025-07-08 Not applicable Working exploit published Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-49730 High 2025-07-08 Not applicable Working exploit published Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally.
CVE-2025-49683 High 2025-07-08 Not applicable Working exploit published Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally.
CVE-2025-47987 High 2025-07-08 Not applicable Working exploit published Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally.
CVE-2024-30085 High 2024-06-11 Not applicable Working exploit published Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2024-30038 High 2024-05-14 Not applicable Working exploit published Win32k Elevation of Privilege Vulnerability
CVE-2023-6246 High 2024-01-31 Not applicable Working exploit published A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program name (the basename of argv[0]) is bigger than 1024 bytes, resulting in an application crash or local privilege escalation. This issue affects glibc 2.36 and newer.
CVE-2023-28311 High 2023-04-11 Not applicable Working exploit published Microsoft Word Remote Code Execution Vulnerability
CVE-2018-1120 Medium 2018-06-20 Not applicable Working exploit published A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).
CVE-2018-1124 High 2018-05-23 Not applicable Working exploit published procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users.
CVE-2018-1123 High 2018-05-23 Not applicable Working exploit published procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service).