WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor microsoft✕
Overview 17,856 matches · 8 in Waratek scope · 0 protected · 724 exploited · 407 CISA KEV · 1,857 public PoC · 700 EPSS ≥ 0.5
17,856matches 8in Waratek scope0.0% 0protected0.0% 724exploited4.1% 407CISA KEV2.3% 1,857public PoC10.4% 700EPSS ≥ 0.53.9%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 0.0% No exploit published 7 0.0% Outside Waratek scope 13 0.1% Not applicable 17,835 99.9% Withdrawn CVE 0 0.0%
Critical 686 3.8% High 11,913 66.7% Medium 4,988 27.9% Low 269 1.5% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 17,856 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 724 4.1% Working exploit published 1,343 7.5% Proof of concept only 250 1.4% Forecast only 131 0.7% No public exploit 15,408 86.3%
split by peak 4,338 / year
Not applicable: 17,835Outside Waratek scope: 13No exploit published: 7Mitigation candidate: 1 Low: 269Medium: 4,988High: 11,913Critical: 686 not blocked: 17,856 No public exploit: 15,408Forecast only: 131Proof of concept only: 250Working exploit published: 1,343Exploited: 724
19951 Not applicable1 Medium1 not blocked1 Working exploit published1 19961 Not applicable1 High1 not blocked1 Working exploit published1 199741 Not applicable41 Critical1 High15 Medium22 Low3 not blocked41 Working exploit published8 Forecast only1 No public exploit32 199825 Not applicable25 High11 Medium11 Low3 not blocked25 Working exploit published5 No public exploit20 1999172 Not applicable172 High70 Medium85 Low17 not blocked172 Exploited1 Working exploit published56 No public exploit115 2000143 Not applicable143 Critical1 High44 Medium75 Low23 not blocked143 Exploited2 Working exploit published51 No public exploit90 2001172 Not applicable172 High63 Medium85 Low24 not blocked172 Exploited6 Working exploit published46 Forecast only1 No public exploit119 2002243 Outside Waratek scope2 Not applicable241 Critical1 High127 Medium104 Low11 not blocked243 Exploited3 Working exploit published54 Forecast only7 No public exploit179 2003100 Not applicable100 High55 Medium44 Low1 not blocked100 Exploited4 Working exploit published41 No public exploit55 2004144 Outside Waratek scope1 Not applicable143 Critical1 High71 Medium60 Low12 not blocked144 Exploited16 Working exploit published43 No public exploit85 2005164 Outside Waratek scope1 Not applicable163 High77 Medium73 Low14 not blocked164 Exploited8 Working exploit published49 Forecast only3 No public exploit104 2006266 Not applicable266 High133 Medium110 Low23 not blocked266 Exploited26 Working exploit published97 Forecast only3 No public exploit140 2007258 Outside Waratek scope1 Not applicable257 High158 Medium95 Low5 not blocked258 Exploited11 Working exploit published70 Forecast only4 No public exploit173 2008233 Not applicable233 Critical3 High165 Medium61 Low4 not blocked233 Exploited15 Working exploit published61 Proof of concept only1 Forecast only5 No public exploit151 2009236 No exploit published1 Not applicable235 Critical3 High174 Medium56 Low3 not blocked236 Exploited31 Working exploit published32 Forecast only2 No public exploit171 2010315 Not applicable315 High238 Medium74 Low3 not blocked315 Exploited19 Working exploit published75 Forecast only6 No public exploit215 2011253 Not applicable253 Critical3 High198 Medium49 Low3 not blocked253 Exploited15 Working exploit published25 Proof of concept only1 Forecast only2 No public exploit210 2012171 Not applicable171 Critical2 High120 Medium47 Low2 not blocked171 Exploited13 Working exploit published10 Forecast only8 No public exploit140 2013343 Outside Waratek scope1 Not applicable342 Critical1 High253 Medium86 Low3 not blocked343 Exploited20 Working exploit published37 Forecast only8 No public exploit278 2014373 Not applicable373 Critical1 High298 Medium73 Low1 not blocked373 Exploited25 Working exploit published69 Forecast only1 No public exploit278 2015564 Outside Waratek scope2 Not applicable562 Critical3 High388 Medium138 Low35 not blocked564 Exploited26 Working exploit published85 Proof of concept only2 Forecast only5 No public exploit446 2016490 Not applicable490 Critical8 High359 Medium104 Low19 not blocked490 Exploited37 Working exploit published76 Forecast only7 No public exploit370 2017699 Not applicable699 Critical13 High396 Medium280 Low10 not blocked699 Exploited41 Working exploit published153 Proof of concept only2 Forecast only3 No public exploit500 2018722 Outside Waratek scope1 Not applicable721 Critical12 High439 Medium260 Low11 not blocked722 Exploited43 Working exploit published91 Proof of concept only4 Forecast only3 No public exploit581 2019848 Not applicable848 Critical32 High486 Medium328 Low2 not blocked848 Exploited46 Working exploit published56 Proof of concept only15 Forecast only11 No public exploit720 20201,274 No exploit published1 Outside Waratek scope1 Not applicable1,272 Critical39 High909 Medium325 Low1 not blocked1,274 Exploited46 Working exploit published5 Proof of concept only19 Forecast only5 No public exploit1,199 2021922 Not applicable922 Critical57 High646 Medium216 Low3 not blocked922 Exploited66 Working exploit published4 Proof of concept only20 Forecast only11 No public exploit821 2022949 No exploit published1 Not applicable948 Critical28 High651 Medium265 Low5 not blocked949 Exploited36 Working exploit published2 Proof of concept only39 Forecast only10 No public exploit862 20231,026 Mitigation candidate1 No exploit published1 Outside Waratek scope2 Not applicable1,022 Critical53 High696 Medium268 Low9 not blocked1,026 Exploited42 Working exploit published14 Proof of concept only39 Forecast only16 No public exploit915 20241,122 No exploit published1 Not applicable1,121 Critical65 High790 Medium264 Low3 not blocked1,122 Exploited48 Working exploit published4 Proof of concept only47 Forecast only7 No public exploit1,016 20251,248 No exploit published1 Not applicable1,247 Critical64 High860 Medium317 Low7 not blocked1,248 Exploited41 Working exploit published17 Proof of concept only23 Forecast only2 No public exploit1,165 20264,338 No exploit published1 Outside Waratek scope1 Not applicable4,336 Critical295 High3,022 Medium1,012 Low9 not blocked4,338 Exploited37 Working exploit published5 Proof of concept only38 No public exploit4,258
19961999200220052008201120142017202020232026
17,856 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 179 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-96916 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96915 High 2026-10-13 Not applicable No public exploit Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-96914 High 2026-10-13 Not applicable No public exploit Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-96913 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96912 High 2026-10-13 Not applicable No public exploit Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96911 High 2026-10-13 Not applicable No public exploit Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-96910 Medium 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-96909 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
CVE-2026-96868 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96867 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-96866 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
CVE-2026-96865 Medium 2026-10-13 Not applicable No public exploit Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
CVE-2026-96864 Critical 2026-10-13 Not applicable No public exploit Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-96863 Medium 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-96862 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-96861 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
CVE-2026-96860 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
CVE-2026-96859 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-96858 Medium 2026-10-13 Not applicable No public exploit Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
CVE-2026-96857 Medium 2026-10-13 Not applicable No public exploit Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.
CVE-2026-96856 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-96855 Medium 2026-10-13 Not applicable No public exploit Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
CVE-2026-96854 Medium 2026-10-13 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-96853 Medium 2026-10-13 Not applicable No public exploit Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-96852 High 2026-10-13 Not applicable No public exploit Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-96851 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-96850 Medium 2026-10-13 Not applicable No public exploit Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
CVE-2026-96849 Medium 2026-10-13 Not applicable No public exploit Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-96848 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-96847 High 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-96846 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
CVE-2026-96844 High 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-96843 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-96325 High 2026-10-13 Not applicable No public exploit Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.
CVE-2026-96324 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-96323 High 2026-10-13 Not applicable No public exploit Use after free in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-96322 High 2026-10-13 Not applicable No public exploit Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
CVE-2026-96321 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.
CVE-2026-96320 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96319 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96318 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
CVE-2026-96317 High 2026-10-13 Not applicable No public exploit Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96316 Medium 2026-10-13 Not applicable No public exploit Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
CVE-2026-96315 Medium 2026-10-13 Not applicable No public exploit Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.
CVE-2026-96314 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
CVE-2026-96313 High 2026-10-13 Not applicable No public exploit Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-96312 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96311 Medium 2026-10-13 Not applicable No public exploit Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
CVE-2026-96310 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96309 High 2026-10-13 Not applicable No public exploit Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2026-96308 High 2026-10-13 Not applicable No public exploit Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96307 High 2026-10-13 Not applicable No public exploit Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96306 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96305 High 2026-10-13 Not applicable No public exploit Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96304 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96303 Medium 2026-10-13 Not applicable No public exploit Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96302 High 2026-10-13 Not applicable No public exploit Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96301 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96300 Medium 2026-10-13 Not applicable No public exploit Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.
CVE-2026-96254 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96253 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96252 Critical 2026-10-13 Not applicable No public exploit Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-96251 High 2026-10-13 Not applicable No public exploit Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
CVE-2026-96250 High 2026-10-13 Not applicable No public exploit Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96249 High 2026-10-13 Not applicable No public exploit Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-96248 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.
CVE-2026-96247 Medium 2026-10-13 Not applicable No public exploit Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-96246 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
CVE-2026-96245 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2026-96244 High 2026-10-13 Not applicable No public exploit Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.
CVE-2026-96243 High 2026-10-13 Not applicable No public exploit Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
CVE-2026-96223 High 2026-10-13 Not applicable No public exploit Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-96222 High 2026-10-13 Not applicable No public exploit Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-96220 High 2026-10-13 Not applicable No public exploit Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.
CVE-2026-96219 Critical 2026-10-13 Not applicable No public exploit Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
CVE-2026-96218 Medium 2026-10-13 Not applicable No public exploit Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
CVE-2026-96217 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96216 High 2026-10-13 Not applicable No public exploit Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96215 High 2026-10-13 Not applicable No public exploit Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-96209 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.
CVE-2026-96206 Medium 2026-10-13 Not applicable No public exploit Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.
CVE-2026-96186 High 2026-10-13 Not applicable No public exploit Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
CVE-2026-96183 Medium 2026-10-13 Not applicable No public exploit Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
CVE-2026-96118 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96113 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96108 High 2026-10-13 Not applicable No public exploit Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-96096 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVE-2026-96071 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVE-2026-96044 High 2026-10-13 Not applicable No public exploit No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-95943 High 2026-10-13 Not applicable No public exploit Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
CVE-2026-95904 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-94512 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-94506 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.
CVE-2026-88226 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-88219 High 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-88210 High 2026-10-13 Not applicable No public exploit Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-88209 Medium 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88208 Medium 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88207 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-88206 High 2026-10-13 Not applicable No public exploit Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
‹ prev page 3 of 179 next ›