Overview 724 matches · 1 in Waratek scope · 0 protected · 407 CISA KEV · 360 public PoC · 272 EPSS ≥ 0.5
724matches
1in Waratek scope0.1%
0protected0.0%
407CISA KEV56.2%
360public PoC49.7%
272EPSS ≥ 0.537.6%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
1
0.1%
No exploit published
0
0.0%
Outside Waratek scope
3
0.4%
Not applicable
720
99.4%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
724
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
724
100.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 66 / year
19991
Not applicable1
High1
not blocked1
Exploited1
20002
Not applicable2
High1
Medium1
not blocked2
Exploited2
20016
Not applicable6
High5
Medium1
not blocked6
Exploited6
20023
Not applicable3
High2
Medium1
not blocked3
Exploited3
20034
Not applicable4
High4
not blocked4
Exploited4
200416
Not applicable16
Critical1
High9
Medium6
not blocked16
Exploited16
20058
Not applicable8
High5
Medium2
Low1
not blocked8
Exploited8
200626
Not applicable26
High18
Medium7
Low1
not blocked26
Exploited26
200711
Not applicable11
High10
Medium1
not blocked11
Exploited11
200815
Not applicable15
Critical2
High12
Medium1
not blocked15
Exploited15
200931
Not applicable31
High26
Medium4
Low1
not blocked31
Exploited31
201019
Not applicable19
High17
Medium2
not blocked19
Exploited19
201115
Not applicable15
Critical1
High13
Medium1
not blocked15
Exploited15
201213
Not applicable13
High11
Medium2
not blocked13
Exploited13
201320
Not applicable20
High16
Medium4
not blocked20
Exploited20
201425
Not applicable25
Critical1
High19
Medium5
not blocked25
Exploited25
201526
Not applicable26
Critical3
High18
Medium5
not blocked26
Exploited26
201637
Not applicable37
High33
Medium4
not blocked37
Exploited37
201741
Not applicable41
Critical2
High36
Medium3
not blocked41
Exploited41
201843
Outside Waratek scope1
Not applicable42
High30
Medium13
not blocked43
Exploited43
201946
Not applicable46
Critical2
High38
Medium6
not blocked46
Exploited46
202046
Not applicable46
Critical9
High36
Medium1
not blocked46
Exploited46
202166
Not applicable66
Critical8
High54
Medium4
not blocked66
Exploited66
202236
Not applicable36
Critical6
High25
Medium5
not blocked36
Exploited36
202342
Mitigation candidate1
Outside Waratek scope1
Not applicable40
Critical4
High31
Medium7
not blocked42
Exploited42
202448
Not applicable48
Critical6
High37
Medium5
not blocked48
Exploited48
202541
Not applicable41
Critical3
High30
Medium8
not blocked41
Exploited41
202637
Outside Waratek scope1
Not applicable36
Critical8
High24
Medium5
not blocked37
Exploited37
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-124194 | Medium | 2026-11-10 | Not applicable | Exploited | Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-111497 | Critical | 2026-10-22 | Outside Waratek scope | Exploited | A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. |
| CVE-2026-96951 | High | 2026-10-13 | Not applicable | Exploited | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-85880 | High | 2026-09-08 | Not applicable | Exploited | Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. |
| CVE-2026-81963 | High | 2026-09-08 | Not applicable | Exploited | Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68820 | High | 2026-08-11 | Not applicable | Exploited | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-65660 | High | 2026-08-11 | Not applicable | Exploited | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-63520 | High | 2026-08-11 | Not applicable | Exploited | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-58644 | Critical | 2026-07-14 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-56164 | Critical | 2026-07-14 | Not applicable | Exploited | Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-56155 | High | 2026-07-14 | Not applicable | Exploited | Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-55040 | Critical | 2026-07-14 | Not applicable | Exploited | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-54121 | High | 2026-07-14 | Not applicable | Exploited | Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-50522 | Critical | 2026-07-14 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-45586 | High | 2026-06-09 | Not applicable | Exploited | Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally. |
| CVE-2026-45659 | High | 2026-05-22 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-45498 | High | 2026-05-20 | Not applicable | Exploited | Microsoft Defender Denial of Service Vulnerability |
| CVE-2026-41091 | High | 2026-05-20 | Not applicable | Exploited | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. |
| CVE-2026-42897 | High | 2026-05-14 | Not applicable | Exploited | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-41089 | Critical | 2026-05-12 | Not applicable | Exploited | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. |
| CVE-2026-33825 | High | 2026-04-14 | Not applicable | Exploited | Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33824 | Critical | 2026-04-14 | Not applicable | Exploited | Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. |
| CVE-2026-32202 | Medium | 2026-04-14 | Not applicable | Exploited | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-32201 | Medium | 2026-04-14 | Not applicable | Exploited | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-26127 | High | 2026-03-10 | Not applicable | Exploited | Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-25187 | High | 2026-03-10 | Not applicable | Exploited | Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21262 | High | 2026-03-10 | Not applicable | Exploited | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-21533 | High | 2026-02-10 | Not applicable | Exploited | Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21525 | Medium | 2026-02-10 | Not applicable | Exploited | Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally. |
| CVE-2026-21519 | High | 2026-02-10 | Not applicable | Exploited | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-21514 | High | 2026-02-10 | Not applicable | Exploited | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-21513 | High | 2026-02-10 | Not applicable | Exploited | Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-21510 | High | 2026-02-10 | Not applicable | Exploited | Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-21509 | High | 2026-01-26 | Not applicable | Exploited | Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-20963 | Critical | 2026-01-13 | Not applicable | Exploited | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-20931 | High | 2026-01-13 | Not applicable | Exploited | External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-20805 | Medium | 2026-01-13 | Not applicable | Exploited | Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally. |
| CVE-2025-14174 | High | 2025-12-12 | Not applicable | Exploited | Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
| CVE-2025-62221 | High | 2025-12-09 | Not applicable | Exploited | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-62215 | High | 2025-11-11 | Not applicable | Exploited | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2025-60710 | High | 2025-11-11 | Not applicable | Exploited | Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59287 | Critical | 2025-10-14 | Not applicable | Exploited | Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network. |
| CVE-2025-59230 | High | 2025-10-14 | Not applicable | Exploited | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2025-24990 | High | 2025-10-14 | Not applicable | Exploited | Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware. |
| CVE-2025-9491 | Medium | 2025-08-26 | Not applicable | Exploited | Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of .LNK files. Crafted data in an .LNK file can cause hazardous content in the file to be invisible to a user who inspects the file via the Windows-provided user interface. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25373. |
| CVE-2025-53772 | High | 2025-08-12 | Not applicable | Exploited | Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network. |
| CVE-2025-53771 | Medium | 2025-07-20 | Not applicable | Exploited | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-53770 | Critical | 2025-07-20 | Not applicable | Exploited | Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation. |
| CVE-2025-49706 | Medium | 2025-07-08 | Not applicable | Exploited | Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-49704 | High | 2025-07-08 | Not applicable | Exploited | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2025-47176 | High | 2025-06-10 | Not applicable | Exploited | '.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally. |
| CVE-2025-47170 | High | 2025-06-10 | Not applicable | Exploited | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2025-47165 | High | 2025-06-10 | Not applicable | Exploited | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2025-33073 | High | 2025-06-10 | Not applicable | Exploited | Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network. |
| CVE-2025-33053 | High | 2025-06-10 | Not applicable | Exploited | External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network. |
| CVE-2025-47827 | Medium | 2025-06-05 | Not applicable | Exploited | In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image. |
| CVE-2025-5419 | High | 2025-06-03 | Not applicable | Exploited | Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| CVE-2025-32709 | High | 2025-05-13 | Not applicable | Exploited | Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2025-32706 | High | 2025-05-13 | Not applicable | Exploited | Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-32701 | High | 2025-05-13 | Not applicable | Exploited | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-30400 | High | 2025-05-13 | Not applicable | Exploited | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
| CVE-2025-30397 | High | 2025-05-13 | Not applicable | Exploited | Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. |
| CVE-2025-29824 | High | 2025-04-08 | Not applicable | Exploited | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-26633 | High | 2025-03-11 | Not applicable | Exploited | Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2025-24993 | High | 2025-03-11 | Not applicable | Exploited | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2025-24991 | Medium | 2025-03-11 | Not applicable | Exploited | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2025-24985 | High | 2025-03-11 | Not applicable | Exploited | Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. |
| CVE-2025-24984 | Medium | 2025-03-11 | Not applicable | Exploited | Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2025-24983 | High | 2025-03-11 | Not applicable | Exploited | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2025-24071 | Medium | 2025-03-11 | Not applicable | Exploited | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-24061 | High | 2025-03-11 | Not applicable | Exploited | Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2025-24054 | Medium | 2025-03-11 | Not applicable | Exploited | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-24989 | Critical | 2025-02-19 | Not applicable | Exploited | An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected customers have been notified. This update addressed the registration control bypass. Affected customers have been given instructions on reviewing their sites for potential exploitation and clean up methods. If you've not been notified this vulnerability does not affect you. |
| CVE-2025-21418 | High | 2025-02-11 | Not applicable | Exploited | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2025-21391 | High | 2025-02-11 | Not applicable | Exploited | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2025-21335 | High | 2025-01-14 | Not applicable | Exploited | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2025-21334 | High | 2025-01-14 | Not applicable | Exploited | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2025-21333 | High | 2025-01-14 | Not applicable | Exploited | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability |
| CVE-2024-49138 | High | 2024-12-12 | Not applicable | Exploited | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2024-49035 | Critical | 2024-11-26 | Not applicable | Exploited | An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network. |
| CVE-2024-49039 | High | 2024-11-12 | Not applicable | Exploited | Windows Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2024-43451 | Medium | 2024-11-12 | Not applicable | Exploited | NTLM Hash Disclosure Spoofing Vulnerability |
| CVE-2024-43573 | High | 2024-10-08 | Not applicable | Exploited | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-43572 | High | 2024-10-08 | Not applicable | Exploited | Microsoft Management Console Remote Code Execution Vulnerability |
| CVE-2024-43468 | Critical | 2024-10-08 | Not applicable | Exploited | Microsoft Configuration Manager Remote Code Execution Vulnerability |
| CVE-2024-43491 | Critical | 2024-09-10 | Not applicable | Exploited | Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July 2015). This means that an attacker could exploit these previously mitigated vulnerabilities on Windows 10, version 1507 (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB) systems that have installed the Windows security update released on March 12, 2024—KB5035858 (OS Build 10240.20526) or other updates released until August 2024. All later versions of Windows 10 are not impacted by this vulnerability. This servicing stack vulnerability is addressed by installing the September 2024 Servicing stack update (SSU KB5043936) AND the September 2024 Windows security update (KB5043083), in that order. Note: Windows 10, version 1507 reached the end of support (EOS) on May 9, 2017 for devices running the Pro, Home, Enterprise, Education, and Enterprise IoT editions. Only Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB editions are still under support. |
| CVE-2024-43461 | High | 2024-09-10 | Not applicable | Exploited | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-38226 | High | 2024-09-10 | Not applicable | Exploited | Microsoft Publisher Security Feature Bypass Vulnerability |
| CVE-2024-38217 | Medium | 2024-09-10 | Not applicable | Exploited | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2024-38014 | High | 2024-09-10 | Not applicable | Exploited | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2024-7971 | Critical | 2024-08-21 | Not applicable | Exploited | Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| CVE-2024-7965 | High | 2024-08-21 | Not applicable | Exploited | Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| CVE-2024-38213 | Medium | 2024-08-13 | Not applicable | Exploited | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2024-38196 | High | 2024-08-13 | Not applicable | Exploited | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2024-38193 | High | 2024-08-13 | Not applicable | Exploited | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2024-38189 | High | 2024-08-13 | Not applicable | Exploited | Microsoft Project Remote Code Execution Vulnerability |
| CVE-2024-38178 | High | 2024-08-13 | Not applicable | Exploited | Scripting Engine Memory Corruption Vulnerability |
| CVE-2024-38107 | High | 2024-08-13 | Not applicable | Exploited | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability |
| CVE-2024-38106 | High | 2024-08-13 | Not applicable | Exploited | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-38112 | High | 2024-07-09 | Not applicable | Exploited | Windows MSHTML Platform Spoofing Vulnerability |