Overview 156 matches · 1 in Waratek scope · 0 protected · 2 exploited · 2 CISA KEV · 4 public PoC · 3 EPSS ≥ 0.5
156matches
1in Waratek scope0.6%
0protected0.0%
2exploited1.3%
2CISA KEV1.3%
4public PoC2.6%
3EPSS ≥ 0.51.9%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
1
0.6%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
155
99.4%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
156
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 40 / year
20201
Not applicable1
Medium1
not blocked1
No public exploit1
20211
Not applicable1
High1
not blocked1
No public exploit1
202216
Not applicable16
High14
Medium2
not blocked16
Proof of concept only1
No public exploit15
202337
Mitigation candidate1
Not applicable36
Critical2
High26
Medium9
not blocked37
Exploited2
Proof of concept only3
Forecast only1
No public exploit31
202438
Not applicable38
Critical2
High28
Medium8
not blocked38
Proof of concept only5
No public exploit33
202523
Not applicable23
Critical1
High19
Medium3
not blocked23
Working exploit published1
No public exploit22
202640
Not applicable40
Critical2
High30
Medium8
not blocked40
No public exploit40
2020202120222023202420252026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2024-0056 | High | 2024-01-09 | Not applicable | No public exploit | Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability |
| CVE-2023-36558 | Medium | 2023-11-14 | Not applicable | Proof of concept only | ASP.NET Core Security Feature Bypass Vulnerability |
| CVE-2023-36049 | Critical | 2023-11-14 | Not applicable | No public exploit | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-36042 | Medium | 2023-11-14 | Not applicable | No public exploit | Visual Studio Denial of Service Vulnerability |
| CVE-2023-36038 | High | 2023-11-14 | Not applicable | Proof of concept only | ASP.NET Core Denial of Service Vulnerability |
| CVE-2023-44487 | High | 2023-10-10 | Mitigation candidate | Exploited | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
| CVE-2023-38171 | High | 2023-10-10 | Not applicable | Forecast only | Microsoft QUIC Denial of Service Vulnerability |
| CVE-2023-36799 | Medium | 2023-09-12 | Not applicable | No public exploit | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2023-36796 | High | 2023-09-12 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36794 | High | 2023-09-12 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36793 | High | 2023-09-12 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36792 | High | 2023-09-12 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36759 | Medium | 2023-09-12 | Not applicable | No public exploit | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-36758 | Critical | 2023-09-12 | Not applicable | No public exploit | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-38180 | High | 2023-08-08 | Not applicable | Exploited | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2023-38178 | High | 2023-08-08 | Not applicable | No public exploit | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2023-36897 | High | 2023-08-08 | Not applicable | No public exploit | Visual Studio Tools for Office Runtime Spoofing Vulnerability |
| CVE-2023-35391 | High | 2023-08-08 | Not applicable | No public exploit | ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability |
| CVE-2023-35390 | High | 2023-08-08 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-33170 | High | 2023-07-11 | Not applicable | No public exploit | ASP.NET and Visual Studio Security Feature Bypass Vulnerability |
| CVE-2023-33127 | High | 2023-07-11 | Not applicable | No public exploit | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-33139 | Medium | 2023-06-14 | Not applicable | No public exploit | Visual Studio Information Disclosure Vulnerability |
| CVE-2023-33135 | High | 2023-06-14 | Not applicable | No public exploit | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-33128 | High | 2023-06-14 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-33126 | High | 2023-06-14 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-32032 | Medium | 2023-06-14 | Not applicable | Proof of concept only | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-24897 | High | 2023-06-14 | Not applicable | No public exploit | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-24895 | High | 2023-06-14 | Not applicable | No public exploit | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-28299 | Medium | 2023-04-11 | Not applicable | No public exploit | Visual Studio Spoofing Vulnerability |
| CVE-2023-28296 | High | 2023-04-11 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-28263 | Medium | 2023-04-11 | Not applicable | No public exploit | Visual Studio Information Disclosure Vulnerability |
| CVE-2023-28262 | High | 2023-04-11 | Not applicable | No public exploit | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-28260 | High | 2023-04-11 | Not applicable | No public exploit | .NET DLL Hijacking Remote Code Execution Vulnerability |
| CVE-2023-23381 | High | 2023-02-14 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-21815 | High | 2023-02-14 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-21808 | High | 2023-02-14 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-21567 | Medium | 2023-02-14 | Not applicable | No public exploit | Visual Studio Denial of Service Vulnerability |
| CVE-2023-21566 | High | 2023-02-14 | Not applicable | No public exploit | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2022-41119 | High | 2022-11-09 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2022-41032 | High | 2022-10-11 | Not applicable | No public exploit | NuGet Client Elevation of Privilege Vulnerability |
| CVE-2022-38013 | High | 2022-09-13 | Not applicable | No public exploit | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2022-35827 | High | 2022-08-09 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2022-35826 | High | 2022-08-09 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2022-35825 | High | 2022-08-09 | Not applicable | Proof of concept only | Visual Studio Remote Code Execution Vulnerability |
| CVE-2022-35777 | High | 2022-08-09 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2022-30184 | Medium | 2022-06-15 | Not applicable | No public exploit | .NET and Visual Studio Information Disclosure Vulnerability |
| CVE-2022-29145 | High | 2022-05-10 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-29117 | High | 2022-05-10 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-23267 | High | 2022-05-10 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-24513 | High | 2022-04-15 | Not applicable | No public exploit | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2022-24767 | High | 2022-04-12 | Not applicable | No public exploit | GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account. |
| CVE-2022-24512 | Medium | 2022-03-09 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2022-24464 | High | 2022-03-09 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2022-21986 | High | 2022-02-09 | Not applicable | No public exploit | .NET Denial of Service Vulnerability |
| CVE-2021-43877 | High | 2021-12-15 | Not applicable | No public exploit | ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2020-8927 | Medium | 2020-09-15 | Not applicable | No public exploit | A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits. |