WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-122✕
Overview 4,083 matches · 3 in Waratek scope · 0 protected · 29 exploited · 21 CISA KEV · 51 public PoC · 23 EPSS ≥ 0.5
4,083matches 3in Waratek scope0.1% 0protected0.0% 29exploited0.7% 21CISA KEV0.5% 51public PoC1.2% 23EPSS ≥ 0.50.6%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 0.1% Outside Waratek scope 13 0.3% Not applicable 4,067 99.6% Withdrawn CVE 0 0.0%
Critical 445 10.9% High 3,009 73.7% Medium 488 12.0% Low 140 3.4% None 0 0.0% Unknown 1 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 4,083 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 29 0.7% Working exploit published 14 0.3% Proof of concept only 481 11.8% Forecast only 14 0.3% No public exploit 3,545 86.8%
split by peak 2,251 / year
Not applicable: 4,067Outside Waratek scope: 13No exploit published: 3 Unknown: 1Low: 140Medium: 488High: 3,009Critical: 445 not blocked: 4,083 No public exploit: 3,545Forecast only: 14Proof of concept only: 481Working exploit published: 14Exploited: 29
20091 Not applicable1 High1 not blocked1 Exploited1 20100 20110 20120 20131 Not applicable1 Medium1 not blocked1 Proof of concept only1 20144 Not applicable4 High2 Medium2 not blocked4 No public exploit4 20152 Not applicable2 Critical1 High1 not blocked2 Exploited1 No public exploit1 20162 Not applicable2 High2 not blocked2 No public exploit2 20177 Not applicable7 Critical1 High6 not blocked7 No public exploit7 201845 Not applicable45 Critical10 High32 Medium3 not blocked45 Working exploit published3 No public exploit42 201968 Outside Waratek scope8 Not applicable60 Critical34 High34 not blocked68 Exploited2 No public exploit66 202054 Not applicable54 Critical12 High32 Medium10 not blocked54 Exploited1 Forecast only2 No public exploit51 2021130 Outside Waratek scope1 Not applicable129 Critical30 High87 Medium13 not blocked130 Exploited1 Proof of concept only1 Forecast only6 No public exploit122 2022189 Outside Waratek scope1 Not applicable188 Critical30 High146 Medium11 Low2 not blocked189 Exploited1 Proof of concept only32 Forecast only1 No public exploit155 2023257 No exploit published1 Not applicable256 Critical32 High188 Medium34 Low3 not blocked257 Exploited6 Working exploit published1 Proof of concept only45 Forecast only2 No public exploit203 2024528 No exploit published1 Not applicable527 Critical38 High417 Medium70 Low3 not blocked528 Exploited4 Working exploit published3 Proof of concept only67 Forecast only3 No public exploit451 2025544 Outside Waratek scope1 Not applicable543 Critical40 High389 Medium71 Low44 not blocked544 Exploited6 Working exploit published5 Proof of concept only111 No public exploit422 20262,251 No exploit published1 Outside Waratek scope2 Not applicable2,248 Critical217 High1,672 Medium273 Low88 Unknown1 not blocked2,251 Exploited6 Working exploit published2 Proof of concept only224 No public exploit2,019
201020122014201620182020202220242026
4,083 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 41 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-59593 High 2026-11-10 Not applicable No public exploit In tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-58787 High 2026-11-10 Not applicable No public exploit In chppWifiRangingEventNotification of clients/wifi.c, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-58722 Critical 2026-11-10 Not applicable No public exploit In chppProcessDiscoverAllResponse of system/chre/chpp/clients/discovery.c, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58696 Medium 2026-11-10 Not applicable No public exploit In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56956 Medium 2026-11-10 Not applicable No public exploit In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-54436 High 2026-11-10 Not applicable No public exploit Heap-based Buffer Overflow in the io-char library's DCMD_CHR_WAITINFO devctl() handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver.
CVE-2026-40433 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow for some Intel(R) PROSet Wireless Wi-Fi Software for Windows within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (high) impacts.
CVE-2026-40275 High 2026-11-10 Not applicable No public exploit Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel.
CVE-2026-34017 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVE-2026-126050 High 2026-11-10 Not applicable No public exploit apitrace 2.0 through 14.0 contains a heap-based buffer overflow in SnappyFile::flushReadCache() that allows attackers to write past m_compressedCache via an oversized compressed chunk length. Attackers can supply a crafted .trace file whose 4-byte chunk length exceeds the fixed buffer size, corrupting heap memory when users dump, inspect, or replay it.
CVE-2026-125401 High 2026-11-10 Not applicable No public exploit Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/ec_gg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt heap memory in the Ettercap process, which normally runs as root.
CVE-2026-125393 High 2026-11-10 Not applicable No public exploit MailEnable Enterprise Premium before 10.62 contains a heap overflow vulnerability in the IMAP X-FB-FETCH command that allows authenticated users to overflow a fixed 0x400-byte heap buffer. Attackers can supply an X-FB-USER address longer than about 1016 bytes, which is formatted without a length check, to crash the IMAP service and cause denial of service.
CVE-2026-125343 High 2026-11-10 Not applicable No public exploit Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-125137 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-125136 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-124176 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-124174 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-124170 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-123394 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-123384 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-123383 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-123380 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-123379 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-123378 High 2026-11-10 Not applicable No public exploit Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-123377 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-123376 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-123263 High 2026-11-10 Not applicable No public exploit After Effects is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-122984 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-122198 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-122179 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
CVE-2026-122176 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows SMB allows an authorized attacker to execute code over a network.
CVE-2026-122173 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-122171 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.
CVE-2026-122168 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
CVE-2026-122167 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-122165 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
CVE-2026-121681 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
CVE-2026-120791 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120790 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120789 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120788 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120786 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120785 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120005 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-120003 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-120001 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-119997 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
CVE-2026-119996 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-119995 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-119986 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-119969 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-119950 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-119944 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Mobile Device Management allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-119938 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-119937 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges with a physical attack.
CVE-2026-119921 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.
CVE-2026-119919 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally.
CVE-2026-119917 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally.
CVE-2026-119916 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Input System allows an authorized attacker to elevate privileges locally.
CVE-2026-119885 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-119884 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-119881 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-119880 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.
CVE-2026-119876 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows USB Scanner Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-119872 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-119858 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-119847 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-119840 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-119834 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-119831 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-119830 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-119829 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-119823 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-119816 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.
CVE-2026-119394 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Enhanced Storage allows an authorized attacker to execute code with a physical attack.
CVE-2026-119392 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-119390 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code locally.
CVE-2026-119382 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.
CVE-2026-118745 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-118726 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118722 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118721 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118718 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118715 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-118714 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118709 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118707 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118705 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118701 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118302 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118299 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118298 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118297 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118294 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118280 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-118279 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-118277 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-118229 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-118228 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-118227 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
‹ prev page 2 of 41 next ›