Overview 700 matches · 1 in Waratek scope · 0 protected · 272 exploited · 187 CISA KEV · 514 public PoC
700matches
1in Waratek scope0.1%
0protected0.0%
272exploited38.9%
187CISA KEV26.7%
514public PoC73.4%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
1
0.1%
No exploit published
0
0.0%
Outside Waratek scope
7
1.0%
Not applicable
692
98.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
700
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
272
38.9%
Working exploit published
275
39.3%
Proof of concept only
22
3.1%
Forecast only
131
18.7%
No public exploit
0
0.0%
split by
peak 73 / year
19974
Not applicable4
High1
Medium2
Low1
not blocked4
Working exploit published3
Forecast only1
19982
Not applicable2
High1
Medium1
not blocked2
Working exploit published2
19992
Not applicable2
High2
not blocked2
Working exploit published2
200011
Not applicable11
High3
Medium6
Low2
not blocked11
Exploited1
Working exploit published10
20019
Not applicable9
High6
Medium3
not blocked9
Exploited2
Working exploit published6
Forecast only1
200217
Not applicable17
Critical1
High12
Medium3
Low1
not blocked17
Exploited1
Working exploit published9
Forecast only7
200313
Not applicable13
High10
Medium3
not blocked13
Exploited3
Working exploit published10
200421
Outside Waratek scope1
Not applicable20
Critical1
High16
Medium4
not blocked21
Exploited7
Working exploit published14
200527
Outside Waratek scope1
Not applicable26
High18
Medium8
Low1
not blocked27
Exploited6
Working exploit published18
Forecast only3
200636
Not applicable36
High32
Medium3
Low1
not blocked36
Exploited8
Working exploit published25
Forecast only3
200720
Not applicable20
High18
Medium2
not blocked20
Exploited4
Working exploit published12
Forecast only4
200824
Not applicable24
Critical2
High19
Medium3
not blocked24
Exploited7
Working exploit published12
Forecast only5
200921
Not applicable21
High17
Medium3
Low1
not blocked21
Exploited14
Working exploit published5
Forecast only2
201033
Not applicable33
High31
Medium2
not blocked33
Exploited11
Working exploit published16
Forecast only6
201112
Not applicable12
Critical1
High10
Medium1
not blocked12
Exploited3
Working exploit published6
Proof of concept only1
Forecast only2
201221
Not applicable21
High15
Medium6
not blocked21
Exploited10
Working exploit published3
Forecast only8
201323
Not applicable23
High20
Medium3
not blocked23
Exploited11
Working exploit published4
Forecast only8
201419
Not applicable19
Critical1
High16
Medium2
not blocked19
Exploited13
Working exploit published5
Forecast only1
201523
Outside Waratek scope1
Not applicable22
Critical3
High16
Medium3
Low1
not blocked23
Exploited13
Working exploit published4
Proof of concept only1
Forecast only5
201638
Not applicable38
Critical1
High32
Medium3
Low2
not blocked38
Exploited13
Working exploit published18
Forecast only7
201773
Not applicable73
Critical3
High68
Medium2
not blocked73
Exploited24
Working exploit published46
Forecast only3
201852
Outside Waratek scope1
Not applicable51
Critical1
High47
Medium4
not blocked52
Exploited13
Working exploit published35
Proof of concept only1
Forecast only3
201925
Not applicable25
Critical7
High14
Medium4
not blocked25
Exploited9
Working exploit published4
Proof of concept only1
Forecast only11
202021
Not applicable21
Critical8
High13
not blocked21
Exploited14
Working exploit published2
Forecast only5
202140
Not applicable40
Critical7
High29
Medium4
not blocked40
Exploited26
Working exploit published2
Proof of concept only1
Forecast only11
202228
Not applicable28
Critical8
High18
Medium2
not blocked28
Exploited13
Working exploit published1
Proof of concept only4
Forecast only10
202336
Mitigation candidate1
Outside Waratek scope2
Not applicable33
Critical6
High26
Medium4
not blocked36
Exploited15
Proof of concept only5
Forecast only16
202425
Not applicable25
Critical5
High18
Medium2
not blocked25
Exploited12
Proof of concept only6
Forecast only7
202513
Not applicable13
Critical4
High5
Medium4
not blocked13
Exploited9
Working exploit published1
Proof of concept only1
Forecast only2
202611
Outside Waratek scope1
Not applicable10
Critical4
High6
Medium1
not blocked11
Exploited10
Proof of concept only1
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-111497 | Critical | 2026-10-22 | Outside Waratek scope | Exploited | A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. |
| CVE-2026-55040 | Critical | 2026-07-14 | Not applicable | Exploited | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-49160 | High | 2026-06-09 | Not applicable | Proof of concept only | Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network. |
| CVE-2026-45659 | High | 2026-05-22 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-45498 | High | 2026-05-20 | Not applicable | Exploited | Microsoft Defender Denial of Service Vulnerability |
| CVE-2026-42897 | High | 2026-05-14 | Not applicable | Exploited | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-41089 | Critical | 2026-05-12 | Not applicable | Exploited | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. |
| CVE-2026-33824 | Critical | 2026-04-14 | Not applicable | Exploited | Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. |
| CVE-2026-32202 | Medium | 2026-04-14 | Not applicable | Exploited | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-21510 | High | 2026-02-10 | Not applicable | Exploited | Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-21509 | High | 2026-01-26 | Not applicable | Exploited | Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2025-59287 | Critical | 2025-10-14 | Not applicable | Exploited | Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network. |
| CVE-2025-55315 | Critical | 2025-10-14 | Not applicable | Working exploit published | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. |
| CVE-2025-9491 | Medium | 2025-08-26 | Not applicable | Exploited | Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of .LNK files. Crafted data in an .LNK file can cause hazardous content in the file to be invisible to a user who inspects the file via the Windows-provided user interface. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25373. |
| CVE-2025-53771 | Medium | 2025-07-20 | Not applicable | Exploited | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-53770 | Critical | 2025-07-20 | Not applicable | Exploited | Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation. |
| CVE-2025-49706 | Medium | 2025-07-08 | Not applicable | Exploited | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-49704 | High | 2025-07-08 | Not applicable | Exploited | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2025-33073 | High | 2025-06-10 | Not applicable | Exploited | Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network. |
| CVE-2025-33053 | High | 2025-06-10 | Not applicable | Exploited | External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network. |
| CVE-2025-29971 | High | 2025-05-13 | Not applicable | Forecast only | Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network. |
| CVE-2025-24054 | Medium | 2025-03-11 | Not applicable | Exploited | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-21298 | Critical | 2025-01-14 | Not applicable | Proof of concept only | Windows OLE Remote Code Execution Vulnerability |
| CVE-2025-21285 | High | 2025-01-14 | Not applicable | Forecast only | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
| CVE-2024-49113 | High | 2024-12-12 | Not applicable | Proof of concept only | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
| CVE-2024-49112 | Critical | 2024-12-12 | Not applicable | Proof of concept only | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
| CVE-2024-43642 | High | 2024-11-12 | Not applicable | Forecast only | Windows SMB Denial of Service Vulnerability |
| CVE-2024-43451 | Medium | 2024-11-12 | Not applicable | Exploited | NTLM Hash Disclosure Spoofing Vulnerability |
| CVE-2024-43572 | High | 2024-10-08 | Not applicable | Exploited | Microsoft Management Console Remote Code Execution Vulnerability |
| CVE-2024-43468 | Critical | 2024-10-08 | Not applicable | Exploited | Microsoft Configuration Manager Remote Code Execution Vulnerability |
| CVE-2024-43461 | High | 2024-09-10 | Not applicable | Exploited | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-38018 | High | 2024-09-10 | Not applicable | Forecast only | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2024-38063 | Critical | 2024-08-13 | Not applicable | Proof of concept only | Windows TCP/IP Remote Code Execution Vulnerability |
| CVE-2024-38112 | High | 2024-07-09 | Not applicable | Exploited | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-38094 | High | 2024-07-09 | Not applicable | Exploited | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2024-38077 | Critical | 2024-07-09 | Not applicable | Proof of concept only | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
| CVE-2024-38030 | Medium | 2024-07-09 | Not applicable | Forecast only | Windows Themes Spoofing Vulnerability |
| CVE-2024-38023 | High | 2024-07-09 | Not applicable | Exploited | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2024-30088 | High | 2024-06-11 | Not applicable | Exploited | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-30044 | High | 2024-05-14 | Not applicable | Forecast only | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2024-30043 | High | 2024-05-14 | Not applicable | Proof of concept only | Microsoft SharePoint Server Information Disclosure Vulnerability |
| CVE-2024-26256 | High | 2024-04-09 | Not applicable | Forecast only | Libarchive Remote Code Execution Vulnerability |
| CVE-2024-26212 | High | 2024-04-09 | Not applicable | Forecast only | DHCP Server Service Denial of Service Vulnerability |
| CVE-2024-29059 | High | 2024-03-23 | Not applicable | Exploited | .NET Framework Information Disclosure Vulnerability |
| CVE-2023-50387 | High | 2024-02-14 | Not applicable | Proof of concept only | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records. |
| CVE-2024-21413 | Critical | 2024-02-13 | Not applicable | Exploited | Microsoft Outlook Remote Code Execution Vulnerability |
| CVE-2024-21412 | High | 2024-02-13 | Not applicable | Exploited | Internet Shortcut Files Security Feature Bypass Vulnerability |
| CVE-2024-21338 | High | 2024-02-13 | Not applicable | Exploited | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-20697 | High | 2024-01-09 | Not applicable | Forecast only | Windows libarchive Remote Code Execution Vulnerability |
| CVE-2023-35628 | High | 2023-12-12 | Not applicable | Forecast only | Windows MSHTML Platform Remote Code Execution Vulnerability |
| CVE-2023-36041 | High | 2023-11-14 | Not applicable | Forecast only | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2023-36039 | High | 2023-11-14 | Not applicable | Forecast only | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2023-36035 | High | 2023-11-14 | Not applicable | Forecast only | Microsoft Exchange Server Spoofing Vulnerability |
| CVE-2023-36025 | High | 2023-11-14 | Not applicable | Exploited | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2023-38545 | Critical | 2023-10-18 | Outside Waratek scope | Proof of concept only | This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host name is detected to be longer, curl switches to local name resolving and instead passes on the resolved address only. Due to this bug, the local variable that means "let the host resolve the name" could get the wrong value during a slow SOCKS5 handshake, and contrary to the intention, copy the too long host name to the target buffer instead of copying just the resolved address there. The target buffer being a heap based buffer, and the host name coming from the URL that curl has been told to operate with. |
| CVE-2023-44487 | High | 2023-10-10 | Mitigation candidate | Exploited | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
| CVE-2023-41763 | Medium | 2023-10-10 | Not applicable | Exploited | Skype for Business Elevation of Privilege Vulnerability |
| CVE-2023-38171 | High | 2023-10-10 | Not applicable | Forecast only | Microsoft QUIC Denial of Service Vulnerability |
| CVE-2023-36606 | High | 2023-10-10 | Not applicable | Forecast only | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
| CVE-2023-38039 | High | 2023-09-15 | Not applicable | Proof of concept only | When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory. |
| CVE-2023-4863 | High | 2023-09-12 | Outside Waratek scope | Exploited | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical) |
| CVE-2023-36777 | Medium | 2023-09-12 | Not applicable | Forecast only | Microsoft Exchange Server Information Disclosure Vulnerability |
| CVE-2023-36745 | High | 2023-09-12 | Not applicable | Exploited | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2023-36744 | High | 2023-09-12 | Not applicable | Forecast only | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2023-36899 | High | 2023-08-08 | Not applicable | Exploited | ASP.NET Elevation of Privilege Vulnerability |
| CVE-2023-36884 | High | 2023-07-11 | Not applicable | Exploited | Windows Search Remote Code Execution Vulnerability |
| CVE-2023-32031 | High | 2023-06-14 | Not applicable | Proof of concept only | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2023-32029 | High | 2023-06-14 | Not applicable | Forecast only | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2023-29357 | Critical | 2023-06-14 | Not applicable | Exploited | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
| CVE-2023-29325 | High | 2023-05-09 | Not applicable | Forecast only | Windows OLE Remote Code Execution Vulnerability |
| CVE-2023-24955 | High | 2023-05-09 | Not applicable | Exploited | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2023-24950 | Medium | 2023-05-09 | Not applicable | Forecast only | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2023-24941 | Critical | 2023-05-09 | Not applicable | Forecast only | Windows Network File System Remote Code Execution Vulnerability |
| CVE-2023-28302 | High | 2023-04-11 | Not applicable | Forecast only | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
| CVE-2023-21769 | High | 2023-04-11 | Not applicable | Forecast only | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
| CVE-2023-21554 | Critical | 2023-04-11 | Not applicable | Proof of concept only | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
| CVE-2023-24880 | Medium | 2023-03-14 | Not applicable | Exploited | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2023-23397 | Critical | 2023-03-14 | Not applicable | Exploited | Microsoft Outlook Elevation of Privilege Vulnerability |
| CVE-2023-21716 | Critical | 2023-02-14 | Not applicable | Exploited | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2023-21707 | High | 2023-02-14 | Not applicable | Proof of concept only | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2023-21529 | High | 2023-02-14 | Not applicable | Exploited | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2023-21768 | High | 2023-01-10 | Not applicable | Exploited | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2023-21758 | High | 2023-01-10 | Not applicable | Forecast only | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
| CVE-2023-21742 | High | 2023-01-10 | Not applicable | Exploited | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2023-21547 | High | 2023-01-10 | Not applicable | Forecast only | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
| CVE-2022-44698 | Medium | 2022-12-13 | Not applicable | Exploited | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2022-44690 | High | 2022-12-13 | Not applicable | Forecast only | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2022-41076 | High | 2022-12-13 | Not applicable | Forecast only | PowerShell Remote Code Execution Vulnerability |
| CVE-2022-41080 | Critical | 2022-11-09 | Not applicable | Exploited | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2022-41034 | High | 2022-10-11 | Not applicable | Working exploit published | Visual Studio Code Remote Code Execution Vulnerability |
| CVE-2022-38053 | High | 2022-10-11 | Not applicable | Forecast only | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2022-38044 | High | 2022-10-11 | Not applicable | Forecast only | Windows CD-ROM File System Driver Remote Code Execution Vulnerability |
| CVE-2022-41082 | High | 2022-10-03 | Not applicable | Exploited | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2022-41040 | High | 2022-10-03 | Not applicable | Exploited | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2022-37961 | High | 2022-09-13 | Not applicable | Forecast only | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2022-37958 | High | 2022-09-13 | Not applicable | Forecast only | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
| CVE-2022-35823 | High | 2022-09-13 | Not applicable | Forecast only | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2022-34721 | Critical | 2022-09-13 | Not applicable | Exploited | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
| CVE-2022-34718 | Critical | 2022-09-13 | Not applicable | Proof of concept only | Windows TCP/IP Remote Code Execution Vulnerability |
| CVE-2022-34715 | Critical | 2022-08-09 | Not applicable | Proof of concept only | Windows Network File System Remote Code Execution Vulnerability |