WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Product visual studio 2022✕Has a public PoC✕
Overview 4 matches · 1 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 2 EPSS ≥ 0.5
4matches 1in Waratek scope25.0% 0protected0.0% 1exploited25.0% 1CISA KEV25.0% 2EPSS ≥ 0.550.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 25.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 3 75.0% Withdrawn CVE 0 0.0%
Critical 1 25.0% High 2 50.0% Medium 1 25.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 4 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 25.0% Working exploit published 1 25.0% Proof of concept only 2 50.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / quarter
Not applicable: 3Mitigation candidate: 1 Medium: 1High: 2Critical: 1 not blocked: 4 Proof of concept only: 2Working exploit published: 1Exploited: 1
Q4 231 Mitigation candidate1 High1 not blocked1 Exploited1 Q1 241 Not applicable1 High1 not blocked1 Proof of concept only1 Q2 241 Not applicable1 Medium1 not blocked1 Proof of concept only1 Q3 240 Q4 240 Q1 250 Q2 250 Q3 250 Q4 251 Not applicable1 Critical1 not blocked1 Working exploit published1
Q4 23Q1 24Q2 24Q3 24Q4 24Q1 25Q2 25Q3 25Q4 25
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2025-55315 Critical 2025-10-14 Not applicable Working exploit published Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
CVE-2024-30052 Medium 2024-06-11 Not applicable Proof of concept only Visual Studio Remote Code Execution Vulnerability
CVE-2024-20656 High 2024-01-09 Not applicable Proof of concept only Visual Studio Elevation of Privilege Vulnerability
CVE-2023-44487 High 2023-10-10 Mitigation candidate Exploited The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.