WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor microsoft✕
Overview 17,856 matches · 8 in Waratek scope · 0 protected · 724 exploited · 407 CISA KEV · 1,857 public PoC · 700 EPSS ≥ 0.5
17,856matches 8in Waratek scope0.0% 0protected0.0% 724exploited4.1% 407CISA KEV2.3% 1,857public PoC10.4% 700EPSS ≥ 0.53.9%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 0.0% No exploit published 7 0.0% Outside Waratek scope 13 0.1% Not applicable 17,835 99.9% Withdrawn CVE 0 0.0%
Critical 686 3.8% High 11,913 66.7% Medium 4,988 27.9% Low 269 1.5% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 17,856 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 724 4.1% Working exploit published 1,343 7.5% Proof of concept only 250 1.4% Forecast only 131 0.7% No public exploit 15,408 86.3%
split by peak 4,338 / year
Not applicable: 17,835Outside Waratek scope: 13No exploit published: 7Mitigation candidate: 1 Low: 269Medium: 4,988High: 11,913Critical: 686 not blocked: 17,856 No public exploit: 15,408Forecast only: 131Proof of concept only: 250Working exploit published: 1,343Exploited: 724
19951 Not applicable1 Medium1 not blocked1 Working exploit published1 19961 Not applicable1 High1 not blocked1 Working exploit published1 199741 Not applicable41 Critical1 High15 Medium22 Low3 not blocked41 Working exploit published8 Forecast only1 No public exploit32 199825 Not applicable25 High11 Medium11 Low3 not blocked25 Working exploit published5 No public exploit20 1999172 Not applicable172 High70 Medium85 Low17 not blocked172 Exploited1 Working exploit published56 No public exploit115 2000143 Not applicable143 Critical1 High44 Medium75 Low23 not blocked143 Exploited2 Working exploit published51 No public exploit90 2001172 Not applicable172 High63 Medium85 Low24 not blocked172 Exploited6 Working exploit published46 Forecast only1 No public exploit119 2002243 Outside Waratek scope2 Not applicable241 Critical1 High127 Medium104 Low11 not blocked243 Exploited3 Working exploit published54 Forecast only7 No public exploit179 2003100 Not applicable100 High55 Medium44 Low1 not blocked100 Exploited4 Working exploit published41 No public exploit55 2004144 Outside Waratek scope1 Not applicable143 Critical1 High71 Medium60 Low12 not blocked144 Exploited16 Working exploit published43 No public exploit85 2005164 Outside Waratek scope1 Not applicable163 High77 Medium73 Low14 not blocked164 Exploited8 Working exploit published49 Forecast only3 No public exploit104 2006266 Not applicable266 High133 Medium110 Low23 not blocked266 Exploited26 Working exploit published97 Forecast only3 No public exploit140 2007258 Outside Waratek scope1 Not applicable257 High158 Medium95 Low5 not blocked258 Exploited11 Working exploit published70 Forecast only4 No public exploit173 2008233 Not applicable233 Critical3 High165 Medium61 Low4 not blocked233 Exploited15 Working exploit published61 Proof of concept only1 Forecast only5 No public exploit151 2009236 No exploit published1 Not applicable235 Critical3 High174 Medium56 Low3 not blocked236 Exploited31 Working exploit published32 Forecast only2 No public exploit171 2010315 Not applicable315 High238 Medium74 Low3 not blocked315 Exploited19 Working exploit published75 Forecast only6 No public exploit215 2011253 Not applicable253 Critical3 High198 Medium49 Low3 not blocked253 Exploited15 Working exploit published25 Proof of concept only1 Forecast only2 No public exploit210 2012171 Not applicable171 Critical2 High120 Medium47 Low2 not blocked171 Exploited13 Working exploit published10 Forecast only8 No public exploit140 2013343 Outside Waratek scope1 Not applicable342 Critical1 High253 Medium86 Low3 not blocked343 Exploited20 Working exploit published37 Forecast only8 No public exploit278 2014373 Not applicable373 Critical1 High298 Medium73 Low1 not blocked373 Exploited25 Working exploit published69 Forecast only1 No public exploit278 2015564 Outside Waratek scope2 Not applicable562 Critical3 High388 Medium138 Low35 not blocked564 Exploited26 Working exploit published85 Proof of concept only2 Forecast only5 No public exploit446 2016490 Not applicable490 Critical8 High359 Medium104 Low19 not blocked490 Exploited37 Working exploit published76 Forecast only7 No public exploit370 2017699 Not applicable699 Critical13 High396 Medium280 Low10 not blocked699 Exploited41 Working exploit published153 Proof of concept only2 Forecast only3 No public exploit500 2018722 Outside Waratek scope1 Not applicable721 Critical12 High439 Medium260 Low11 not blocked722 Exploited43 Working exploit published91 Proof of concept only4 Forecast only3 No public exploit581 2019848 Not applicable848 Critical32 High486 Medium328 Low2 not blocked848 Exploited46 Working exploit published56 Proof of concept only15 Forecast only11 No public exploit720 20201,274 No exploit published1 Outside Waratek scope1 Not applicable1,272 Critical39 High909 Medium325 Low1 not blocked1,274 Exploited46 Working exploit published5 Proof of concept only19 Forecast only5 No public exploit1,199 2021922 Not applicable922 Critical57 High646 Medium216 Low3 not blocked922 Exploited66 Working exploit published4 Proof of concept only20 Forecast only11 No public exploit821 2022949 No exploit published1 Not applicable948 Critical28 High651 Medium265 Low5 not blocked949 Exploited36 Working exploit published2 Proof of concept only39 Forecast only10 No public exploit862 20231,026 Mitigation candidate1 No exploit published1 Outside Waratek scope2 Not applicable1,022 Critical53 High696 Medium268 Low9 not blocked1,026 Exploited42 Working exploit published14 Proof of concept only39 Forecast only16 No public exploit915 20241,122 No exploit published1 Not applicable1,121 Critical65 High790 Medium264 Low3 not blocked1,122 Exploited48 Working exploit published4 Proof of concept only47 Forecast only7 No public exploit1,016 20251,248 No exploit published1 Not applicable1,247 Critical64 High860 Medium317 Low7 not blocked1,248 Exploited41 Working exploit published17 Proof of concept only23 Forecast only2 No public exploit1,165 20264,338 No exploit published1 Outside Waratek scope1 Not applicable4,336 Critical295 High3,022 Medium1,012 Low9 not blocked4,338 Exploited37 Working exploit published5 Proof of concept only38 No public exploit4,258
19961999200220052008201120142017202020232026
17,856 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 179 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-124194 Medium 2026-11-10 Not applicable Exploited Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-69446 Medium 2026-10-30 Not applicable No public exploit Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
CVE-2026-96203 High 2026-10-29 Not applicable No public exploit Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-96199 High 2026-10-29 Not applicable No public exploit Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-96198 High 2026-10-29 Not applicable No public exploit Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-96196 High 2026-10-29 Not applicable No public exploit Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96192 High 2026-10-29 Not applicable No public exploit Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.
CVE-2026-96187 High 2026-10-29 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVE-2026-88090 Medium 2026-10-29 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-88078 Medium 2026-10-29 Not applicable No public exploit Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-88077 High 2026-10-29 Not applicable No public exploit Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-85899 High 2026-10-29 Not applicable No public exploit Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.
CVE-2026-85897 High 2026-10-29 Not applicable No public exploit Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-85890 High 2026-10-29 Not applicable No public exploit Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-85330 Medium 2026-10-29 Not applicable No public exploit Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-20942 Medium 2026-10-29 Not applicable No public exploit Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-85898 High 2026-10-27 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-83831 High 2026-10-27 Not applicable No public exploit Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-62765 High 2026-10-27 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-111497 Critical 2026-10-22 Outside Waratek scope Exploited A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
CVE-2026-108455 Medium 2026-10-15 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108454 Medium 2026-10-15 Not applicable No public exploit Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108453 Medium 2026-10-15 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108452 High 2026-10-15 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-108451 High 2026-10-15 Not applicable No public exploit Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108450 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108449 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108448 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-108447 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108446 High 2026-10-15 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-108445 High 2026-10-15 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108444 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-108443 High 2026-10-15 Not applicable No public exploit Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108442 High 2026-10-15 Not applicable No public exploit Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108441 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108440 High 2026-10-15 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108439 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108438 Medium 2026-10-15 Not applicable No public exploit Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108437 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108436 Medium 2026-10-15 Not applicable No public exploit Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108435 Medium 2026-10-15 Not applicable No public exploit Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108434 Medium 2026-10-15 Not applicable No public exploit Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108433 High 2026-10-15 Not applicable No public exploit Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-108432 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108431 High 2026-10-15 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108430 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108429 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108428 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108427 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108426 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88164 High 2026-10-14 Not applicable No public exploit Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-97844 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97843 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97842 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97841 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97840 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97839 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97838 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97837 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97836 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97835 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97834 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97833 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97832 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97831 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97830 High 2026-10-13 Not applicable No public exploit Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
CVE-2026-97829 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97828 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97827 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97826 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97825 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97824 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97823 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97822 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97821 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97820 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97819 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97817 Medium 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97816 Critical 2026-10-13 Not applicable No public exploit Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-97815 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-97814 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-97813 Medium 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.
CVE-2026-97812 High 2026-10-13 Not applicable No public exploit Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97811 High 2026-10-13 Not applicable No public exploit Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-97810 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97809 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97808 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97807 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97806 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97805 Critical 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-97804 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2026-97803 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-97800 High 2026-10-13 Not applicable No public exploit Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
CVE-2026-97799 High 2026-10-13 Not applicable No public exploit Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97798 High 2026-10-13 Not applicable Proof of concept only Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-97794 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97793 High 2026-10-13 Not applicable Proof of concept only Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
CVE-2026-97792 High 2026-10-13 Not applicable No public exploit Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97790 Medium 2026-10-13 Not applicable No public exploit Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
CVE-2026-97789 High 2026-10-13 Not applicable No public exploit Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
‹ prev page 1 of 179 next ›