WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor microsoft✕
Overview 17,856 matches · 8 in Waratek scope · 0 protected · 724 exploited · 407 CISA KEV · 1,857 public PoC · 700 EPSS ≥ 0.5
17,856matches 8in Waratek scope0.0% 0protected0.0% 724exploited4.1% 407CISA KEV2.3% 1,857public PoC10.4% 700EPSS ≥ 0.53.9%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 0.0% No exploit published 7 0.0% Outside Waratek scope 13 0.1% Not applicable 17,835 99.9% Withdrawn CVE 0 0.0%
Critical 686 3.8% High 11,913 66.7% Medium 4,988 27.9% Low 269 1.5% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 17,856 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 724 4.1% Working exploit published 1,343 7.5% Proof of concept only 250 1.4% Forecast only 131 0.7% No public exploit 15,408 86.3%
split by peak 4,338 / year
Not applicable: 17,835Outside Waratek scope: 13No exploit published: 7Mitigation candidate: 1 Low: 269Medium: 4,988High: 11,913Critical: 686 not blocked: 17,856 No public exploit: 15,408Forecast only: 131Proof of concept only: 250Working exploit published: 1,343Exploited: 724
19951 Not applicable1 Medium1 not blocked1 Working exploit published1 19961 Not applicable1 High1 not blocked1 Working exploit published1 199741 Not applicable41 Critical1 High15 Medium22 Low3 not blocked41 Working exploit published8 Forecast only1 No public exploit32 199825 Not applicable25 High11 Medium11 Low3 not blocked25 Working exploit published5 No public exploit20 1999172 Not applicable172 High70 Medium85 Low17 not blocked172 Exploited1 Working exploit published56 No public exploit115 2000143 Not applicable143 Critical1 High44 Medium75 Low23 not blocked143 Exploited2 Working exploit published51 No public exploit90 2001172 Not applicable172 High63 Medium85 Low24 not blocked172 Exploited6 Working exploit published46 Forecast only1 No public exploit119 2002243 Outside Waratek scope2 Not applicable241 Critical1 High127 Medium104 Low11 not blocked243 Exploited3 Working exploit published54 Forecast only7 No public exploit179 2003100 Not applicable100 High55 Medium44 Low1 not blocked100 Exploited4 Working exploit published41 No public exploit55 2004144 Outside Waratek scope1 Not applicable143 Critical1 High71 Medium60 Low12 not blocked144 Exploited16 Working exploit published43 No public exploit85 2005164 Outside Waratek scope1 Not applicable163 High77 Medium73 Low14 not blocked164 Exploited8 Working exploit published49 Forecast only3 No public exploit104 2006266 Not applicable266 High133 Medium110 Low23 not blocked266 Exploited26 Working exploit published97 Forecast only3 No public exploit140 2007258 Outside Waratek scope1 Not applicable257 High158 Medium95 Low5 not blocked258 Exploited11 Working exploit published70 Forecast only4 No public exploit173 2008233 Not applicable233 Critical3 High165 Medium61 Low4 not blocked233 Exploited15 Working exploit published61 Proof of concept only1 Forecast only5 No public exploit151 2009236 No exploit published1 Not applicable235 Critical3 High174 Medium56 Low3 not blocked236 Exploited31 Working exploit published32 Forecast only2 No public exploit171 2010315 Not applicable315 High238 Medium74 Low3 not blocked315 Exploited19 Working exploit published75 Forecast only6 No public exploit215 2011253 Not applicable253 Critical3 High198 Medium49 Low3 not blocked253 Exploited15 Working exploit published25 Proof of concept only1 Forecast only2 No public exploit210 2012171 Not applicable171 Critical2 High120 Medium47 Low2 not blocked171 Exploited13 Working exploit published10 Forecast only8 No public exploit140 2013343 Outside Waratek scope1 Not applicable342 Critical1 High253 Medium86 Low3 not blocked343 Exploited20 Working exploit published37 Forecast only8 No public exploit278 2014373 Not applicable373 Critical1 High298 Medium73 Low1 not blocked373 Exploited25 Working exploit published69 Forecast only1 No public exploit278 2015564 Outside Waratek scope2 Not applicable562 Critical3 High388 Medium138 Low35 not blocked564 Exploited26 Working exploit published85 Proof of concept only2 Forecast only5 No public exploit446 2016490 Not applicable490 Critical8 High359 Medium104 Low19 not blocked490 Exploited37 Working exploit published76 Forecast only7 No public exploit370 2017699 Not applicable699 Critical13 High396 Medium280 Low10 not blocked699 Exploited41 Working exploit published153 Proof of concept only2 Forecast only3 No public exploit500 2018722 Outside Waratek scope1 Not applicable721 Critical12 High439 Medium260 Low11 not blocked722 Exploited43 Working exploit published91 Proof of concept only4 Forecast only3 No public exploit581 2019848 Not applicable848 Critical32 High486 Medium328 Low2 not blocked848 Exploited46 Working exploit published56 Proof of concept only15 Forecast only11 No public exploit720 20201,274 No exploit published1 Outside Waratek scope1 Not applicable1,272 Critical39 High909 Medium325 Low1 not blocked1,274 Exploited46 Working exploit published5 Proof of concept only19 Forecast only5 No public exploit1,199 2021922 Not applicable922 Critical57 High646 Medium216 Low3 not blocked922 Exploited66 Working exploit published4 Proof of concept only20 Forecast only11 No public exploit821 2022949 No exploit published1 Not applicable948 Critical28 High651 Medium265 Low5 not blocked949 Exploited36 Working exploit published2 Proof of concept only39 Forecast only10 No public exploit862 20231,026 Mitigation candidate1 No exploit published1 Outside Waratek scope2 Not applicable1,022 Critical53 High696 Medium268 Low9 not blocked1,026 Exploited42 Working exploit published14 Proof of concept only39 Forecast only16 No public exploit915 20241,122 No exploit published1 Not applicable1,121 Critical65 High790 Medium264 Low3 not blocked1,122 Exploited48 Working exploit published4 Proof of concept only47 Forecast only7 No public exploit1,016 20251,248 No exploit published1 Not applicable1,247 Critical64 High860 Medium317 Low7 not blocked1,248 Exploited41 Working exploit published17 Proof of concept only23 Forecast only2 No public exploit1,165 20264,338 No exploit published1 Outside Waratek scope1 Not applicable4,336 Critical295 High3,022 Medium1,012 Low9 not blocked4,338 Exploited37 Working exploit published5 Proof of concept only38 No public exploit4,258
19961999200220052008201120142017202020232026
17,856 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 179 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-97788 High 2026-10-13 Not applicable No public exploit Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
CVE-2026-97787 High 2026-10-13 Not applicable No public exploit Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97783 High 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-97782 Medium 2026-10-13 Not applicable No public exploit Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-97781 High 2026-10-13 Not applicable No public exploit Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
CVE-2026-97780 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97779 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97778 High 2026-10-13 Not applicable No public exploit Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97777 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97776 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97775 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97774 High 2026-10-13 Not applicable No public exploit Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-97773 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97772 High 2026-10-13 Not applicable No public exploit Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97771 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97770 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97769 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97768 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97767 High 2026-10-13 Not applicable No public exploit Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97766 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97765 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97763 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97762 High 2026-10-13 Not applicable No public exploit Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97761 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97760 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97759 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97758 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97757 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97756 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97755 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97754 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97753 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97752 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97751 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97750 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97749 Critical 2026-10-13 Not applicable No public exploit Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-97748 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97747 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97746 High 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97745 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97744 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-97743 Medium 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97742 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97741 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97740 Medium 2026-10-13 Not applicable No public exploit Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97739 High 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97738 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97017 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97016 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-97014 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-97012 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-97011 High 2026-10-13 Not applicable No public exploit Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97010 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97009 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-97008 High 2026-10-13 Not applicable No public exploit Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97007 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97005 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-97004 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97003 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97001 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-96997 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.
CVE-2026-96996 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-96995 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
CVE-2026-96960 High 2026-10-13 Not applicable No public exploit Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96959 High 2026-10-13 Not applicable No public exploit Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96958 High 2026-10-13 Not applicable No public exploit Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96957 High 2026-10-13 Not applicable No public exploit Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96956 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-96953 High 2026-10-13 Not applicable No public exploit Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.
CVE-2026-96952 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-96951 High 2026-10-13 Not applicable Exploited Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96950 High 2026-10-13 Not applicable No public exploit Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96949 High 2026-10-13 Not applicable No public exploit Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96948 Medium 2026-10-13 Not applicable No public exploit Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
CVE-2026-96947 High 2026-10-13 Not applicable No public exploit Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96946 High 2026-10-13 Not applicable No public exploit Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96945 High 2026-10-13 Not applicable No public exploit Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
CVE-2026-96944 Medium 2026-10-13 Not applicable No public exploit Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
CVE-2026-96943 High 2026-10-13 Not applicable No public exploit Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
CVE-2026-96939 High 2026-10-13 Not applicable No public exploit Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
CVE-2026-96938 Medium 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96937 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-96935 Medium 2026-10-13 Not applicable No public exploit Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96934 Critical 2026-10-13 Not applicable No public exploit Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96933 High 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96932 High 2026-10-13 Not applicable No public exploit Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96931 High 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96930 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-96929 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96928 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96927 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96926 Medium 2026-10-13 Not applicable No public exploit Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.
CVE-2026-96925 Medium 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96924 Critical 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
CVE-2026-96923 High 2026-10-13 Not applicable No public exploit Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96921 Medium 2026-10-13 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.
CVE-2026-96920 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96919 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96918 High 2026-10-13 Not applicable No public exploit Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96917 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
‹ prev page 2 of 179 next ›