WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Product outlook✕CISA KEV listed✕
Overview 6 matches · 0 in Waratek scope · 0 protected · 2 public PoC · 3 EPSS ≥ 0.5
6matches 0in Waratek scope0.0% 0protected0.0% 2public PoC33.3% 3EPSS ≥ 0.550.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 6 100.0% Withdrawn CVE 0 0.0%
Critical 1 16.7% High 5 83.3% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 6 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 6 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / year
Not applicable: 6 High: 5Critical: 1 not blocked: 6 Exploited: 6
20071 Not applicable1 High1 not blocked1 Exploited1 20080 20090 20100 20110 20120 20130 20140 20151 Not applicable1 High1 not blocked1 Exploited1 20160 20171 Not applicable1 High1 not blocked1 Exploited1 20180 20190 20200 20210 20220 20232 Not applicable2 Critical1 High1 not blocked2 Exploited2 20240 20250 20261 Not applicable1 High1 not blocked1 Exploited1
2008201020122014201620182020202220242026
6 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-96951 High 2026-10-13 Not applicable Exploited Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2023-35311 High 2023-07-11 Not applicable Exploited Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2023-23397 Critical 2023-03-14 Not applicable Exploited Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2017-11774 High 2017-10-13 Not applicable Exploited Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."
CVE-2015-1641 High 2015-04-14 Not applicable Exploited Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."
CVE-2007-0671 High 2007-02-03 Not applicable Exploited Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.