Overview 407 matches · 1 in Waratek scope · 0 protected · 220 public PoC · 187 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
1
0.2%
No exploit published
0
0.0%
Outside Waratek scope
2
0.5%
Not applicable
404
99.3%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
407
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
407
100.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 49 / year
20021
Not applicable1
High1
not blocked1
Exploited1
20030
20041
Not applicable1
High1
not blocked1
Exploited1
20050
20061
Not applicable1
High1
not blocked1
Exploited1
20071
Not applicable1
High1
not blocked1
Exploited1
20081
Not applicable1
Critical1
not blocked1
Exploited1
20098
Not applicable8
High8
not blocked8
Exploited8
20108
Not applicable8
High8
not blocked8
Exploited8
20113
Not applicable3
Critical1
High2
not blocked3
Exploited3
20128
Not applicable8
High8
not blocked8
Exploited8
201313
Not applicable13
High12
Medium1
not blocked13
Exploited13
201414
Not applicable14
Critical1
High12
Medium1
not blocked14
Exploited14
201521
Not applicable21
Critical3
High16
Medium2
not blocked21
Exploited21
201620
Not applicable20
High17
Medium3
not blocked20
Exploited20
201729
Not applicable29
Critical2
High25
Medium2
not blocked29
Exploited29
201817
Not applicable17
High17
not blocked17
Exploited17
201933
Not applicable33
Critical2
High29
Medium2
not blocked33
Exploited33
202025
Not applicable25
Critical6
High19
not blocked25
Exploited25
202149
Not applicable49
Critical5
High42
Medium2
not blocked49
Exploited49
202225
Not applicable25
Critical2
High20
Medium3
not blocked25
Exploited25
202333
Mitigation candidate1
Outside Waratek scope1
Not applicable31
Critical3
High25
Medium5
not blocked33
Exploited33
202434
Not applicable34
Critical5
High26
Medium3
not blocked34
Exploited34
202533
Not applicable33
Critical3
High25
Medium5
not blocked33
Exploited33
202629
Outside Waratek scope1
Not applicable28
Critical7
High17
Medium5
not blocked29
Exploited29
2002200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-124194 | Medium | 2026-11-10 | Not applicable | Exploited | Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-111497 | Critical | 2026-10-22 | Outside Waratek scope | Exploited | A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. |
| CVE-2026-96951 | High | 2026-10-13 | Not applicable | Exploited | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-85880 | High | 2026-09-08 | Not applicable | Exploited | Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. |
| CVE-2026-81963 | High | 2026-09-08 | Not applicable | Exploited | Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68820 | High | 2026-08-11 | Not applicable | Exploited | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65660 | High | 2026-08-11 | Not applicable | Exploited | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-58644 | Critical | 2026-07-14 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-56164 | Critical | 2026-07-14 | Not applicable | Exploited | Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-56155 | High | 2026-07-14 | Not applicable | Exploited | Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-55040 | Critical | 2026-07-14 | Not applicable | Exploited | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-50522 | Critical | 2026-07-14 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-45659 | High | 2026-05-22 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-45498 | High | 2026-05-20 | Not applicable | Exploited | Microsoft Defender Denial of Service Vulnerability |
| CVE-2026-41091 | High | 2026-05-20 | Not applicable | Exploited | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42897 | High | 2026-05-14 | Not applicable | Exploited | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-33825 | High | 2026-04-14 | Not applicable | Exploited | Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33824 | Critical | 2026-04-14 | Not applicable | Exploited | Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. |
| CVE-2026-32202 | Medium | 2026-04-14 | Not applicable | Exploited | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-32201 | Medium | 2026-04-14 | Not applicable | Exploited | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-21533 | High | 2026-02-10 | Not applicable | Exploited | Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21525 | Medium | 2026-02-10 | Not applicable | Exploited | Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally. |
| CVE-2026-21519 | High | 2026-02-10 | Not applicable | Exploited | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21514 | High | 2026-02-10 | Not applicable | Exploited | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-21513 | High | 2026-02-10 | Not applicable | Exploited | Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-21510 | High | 2026-02-10 | Not applicable | Exploited | Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-21509 | High | 2026-01-26 | Not applicable | Exploited | Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-20963 | Critical | 2026-01-13 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-20805 | Medium | 2026-01-13 | Not applicable | Exploited | Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally. |
| CVE-2025-14174 | High | 2025-12-12 | Not applicable | Exploited | Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
| CVE-2025-62221 | High | 2025-12-09 | Not applicable | Exploited | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-62215 | High | 2025-11-11 | Not applicable | Exploited | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2025-60710 | High | 2025-11-11 | Not applicable | Exploited | Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59287 | Critical | 2025-10-14 | Not applicable | Exploited | Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network. |
| CVE-2025-59230 | High | 2025-10-14 | Not applicable | Exploited | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2025-24990 | High | 2025-10-14 | Not applicable | Exploited | Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware. |
| CVE-2025-53770 | Critical | 2025-07-20 | Not applicable | Exploited | Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation. |
| CVE-2025-49706 | Medium | 2025-07-08 | Not applicable | Exploited | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-49704 | High | 2025-07-08 | Not applicable | Exploited | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2025-33073 | High | 2025-06-10 | Not applicable | Exploited | Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network. |
| CVE-2025-33053 | High | 2025-06-10 | Not applicable | Exploited | External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network. |
| CVE-2025-47827 | Medium | 2025-06-05 | Not applicable | Exploited | In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image. |
| CVE-2025-5419 | High | 2025-06-03 | Not applicable | Exploited | Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| CVE-2025-32709 | High | 2025-05-13 | Not applicable | Exploited | Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2025-32706 | High | 2025-05-13 | Not applicable | Exploited | Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-32701 | High | 2025-05-13 | Not applicable | Exploited | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-30400 | High | 2025-05-13 | Not applicable | Exploited | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
| CVE-2025-30397 | High | 2025-05-13 | Not applicable | Exploited | Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. |
| CVE-2025-29824 | High | 2025-04-08 | Not applicable | Exploited | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-26633 | High | 2025-03-11 | Not applicable | Exploited | Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2025-24993 | High | 2025-03-11 | Not applicable | Exploited | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2025-24991 | Medium | 2025-03-11 | Not applicable | Exploited | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2025-24985 | High | 2025-03-11 | Not applicable | Exploited | Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. |
| CVE-2025-24984 | Medium | 2025-03-11 | Not applicable | Exploited | Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2025-24983 | High | 2025-03-11 | Not applicable | Exploited | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2025-24054 | Medium | 2025-03-11 | Not applicable | Exploited | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-24989 | Critical | 2025-02-19 | Not applicable | Exploited | An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected customers have been notified. This update addressed the registration control bypass. Affected customers have been given instructions on reviewing their sites for potential exploitation and clean up methods. If you've not been notified this vulnerability does not affect you. |
| CVE-2025-21418 | High | 2025-02-11 | Not applicable | Exploited | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2025-21391 | High | 2025-02-11 | Not applicable | Exploited | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2025-21335 | High | 2025-01-14 | Not applicable | Exploited | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2025-21334 | High | 2025-01-14 | Not applicable | Exploited | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2025-21333 | High | 2025-01-14 | Not applicable | Exploited | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2024-49138 | High | 2024-12-12 | Not applicable | Exploited | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2024-49035 | Critical | 2024-11-26 | Not applicable | Exploited | An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network. |
| CVE-2024-49039 | High | 2024-11-12 | Not applicable | Exploited | Windows Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2024-43451 | Medium | 2024-11-12 | Not applicable | Exploited | NTLM Hash Disclosure Spoofing Vulnerability |
| CVE-2024-43573 | High | 2024-10-08 | Not applicable | Exploited | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-43572 | High | 2024-10-08 | Not applicable | Exploited | Microsoft Management Console Remote Code Execution Vulnerability |
| CVE-2024-43468 | Critical | 2024-10-08 | Not applicable | Exploited | Microsoft Configuration Manager Remote Code Execution Vulnerability |
| CVE-2024-43461 | High | 2024-09-10 | Not applicable | Exploited | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-38226 | High | 2024-09-10 | Not applicable | Exploited | Microsoft Publisher Security Feature Bypass Vulnerability |
| CVE-2024-38217 | Medium | 2024-09-10 | Not applicable | Exploited | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2024-38014 | High | 2024-09-10 | Not applicable | Exploited | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2024-7971 | Critical | 2024-08-21 | Not applicable | Exploited | Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| CVE-2024-7965 | High | 2024-08-21 | Not applicable | Exploited | Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| CVE-2024-38213 | Medium | 2024-08-13 | Not applicable | Exploited | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2024-38193 | High | 2024-08-13 | Not applicable | Exploited | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2024-38189 | High | 2024-08-13 | Not applicable | Exploited | Microsoft Project Remote Code Execution Vulnerability |
| CVE-2024-38178 | High | 2024-08-13 | Not applicable | Exploited | Scripting Engine Memory Corruption Vulnerability |
| CVE-2024-38107 | High | 2024-08-13 | Not applicable | Exploited | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability |
| CVE-2024-38106 | High | 2024-08-13 | Not applicable | Exploited | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-38112 | High | 2024-07-09 | Not applicable | Exploited | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-38094 | High | 2024-07-09 | Not applicable | Exploited | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2024-38080 | High | 2024-07-09 | Not applicable | Exploited | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2024-35250 | High | 2024-06-11 | Not applicable | Exploited | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
| CVE-2024-30088 | High | 2024-06-11 | Not applicable | Exploited | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-30051 | High | 2024-05-14 | Not applicable | Exploited | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2024-30040 | High | 2024-05-14 | Not applicable | Exploited | Windows MSHTML Platform Security Feature Bypass Vulnerability |
| CVE-2024-29988 | High | 2024-04-09 | Not applicable | Exploited | SmartScreen Prompt Security Feature Bypass Vulnerability |
| CVE-2024-29059 | High | 2024-03-23 | Not applicable | Exploited | .NET Framework Information Disclosure Vulnerability |
| CVE-2024-26169 | High | 2024-03-12 | Not applicable | Exploited | Windows Error Reporting Service Elevation of Privilege Vulnerability |
| CVE-2024-21413 | Critical | 2024-02-13 | Not applicable | Exploited | Microsoft Outlook Remote Code Execution Vulnerability |
| CVE-2024-21412 | High | 2024-02-13 | Not applicable | Exploited | Internet Shortcut Files Security Feature Bypass Vulnerability |
| CVE-2024-21410 | Critical | 2024-02-13 | Not applicable | Exploited | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2024-21351 | High | 2024-02-13 | Not applicable | Exploited | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2024-21338 | High | 2024-02-13 | Not applicable | Exploited | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2023-6345 | Critical | 2023-11-29 | Not applicable | Exploited | Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High) |
| CVE-2023-36424 | High | 2023-11-14 | Not applicable | Exploited | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2023-36036 | High | 2023-11-14 | Not applicable | Exploited | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2023-36033 | High | 2023-11-14 | Not applicable | Exploited | Windows DWM Core Library Elevation of Privilege Vulnerability |