WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Vendor microsoft✕Has a public PoC✕
Overview 1,857 matches · 1 in Waratek scope · 0 protected · 360 exploited · 220 CISA KEV · 514 EPSS ≥ 0.5
1,857matches 1in Waratek scope0.1% 0protected0.0% 360exploited19.4% 220CISA KEV11.8% 514EPSS ≥ 0.527.7%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 0.1% No exploit published 0 0.0% Outside Waratek scope 7 0.4% Not applicable 1,849 99.6% Withdrawn CVE 0 0.0%
Critical 59 3.2% High 1,184 63.8% Medium 557 30.0% Low 57 3.1% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 1,857 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 360 19.4% Working exploit published 1,343 72.3% Proof of concept only 154 8.3% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 177 / year
Not applicable: 1,849Outside Waratek scope: 7Mitigation candidate: 1 Low: 57Medium: 557High: 1,184Critical: 59 not blocked: 1,857 Proof of concept only: 154Working exploit published: 1,343Exploited: 360
19951 Not applicable1 Medium1 not blocked1 Working exploit published1 19961 Not applicable1 High1 not blocked1 Working exploit published1 19978 Not applicable8 High2 Medium6 not blocked8 Working exploit published8 19985 Not applicable5 High2 Medium2 Low1 not blocked5 Working exploit published5 199957 Not applicable57 High17 Medium33 Low7 not blocked57 Exploited1 Working exploit published56 200052 Not applicable52 High12 Medium33 Low7 not blocked52 Exploited1 Working exploit published51 200150 Not applicable50 High19 Medium24 Low7 not blocked50 Exploited4 Working exploit published46 200256 Not applicable56 High31 Medium23 Low2 not blocked56 Exploited2 Working exploit published54 200345 Not applicable45 High31 Medium14 not blocked45 Exploited4 Working exploit published41 200454 Outside Waratek scope1 Not applicable53 Critical1 High30 Medium21 Low2 not blocked54 Exploited11 Working exploit published43 200556 Outside Waratek scope1 Not applicable55 High29 Medium24 Low3 not blocked56 Exploited7 Working exploit published49 2006112 Not applicable112 High51 Medium49 Low12 not blocked112 Exploited15 Working exploit published97 200777 Not applicable77 High51 Medium26 not blocked77 Exploited7 Working exploit published70 200871 Not applicable71 Critical2 High42 Medium27 not blocked71 Exploited9 Working exploit published61 Proof of concept only1 200944 Not applicable44 High27 Medium17 not blocked44 Exploited12 Working exploit published32 201091 Not applicable91 High74 Medium17 not blocked91 Exploited16 Working exploit published75 201132 Not applicable32 Critical1 High25 Medium6 not blocked32 Exploited6 Working exploit published25 Proof of concept only1 201216 Not applicable16 High13 Medium3 not blocked16 Exploited6 Working exploit published10 201351 Not applicable51 High42 Medium9 not blocked51 Exploited14 Working exploit published37 201478 Not applicable78 High74 Medium4 not blocked78 Exploited9 Working exploit published69 2015100 Outside Waratek scope1 Not applicable99 Critical3 High73 Medium14 Low10 not blocked100 Exploited13 Working exploit published85 Proof of concept only2 201691 Not applicable91 Critical1 High70 Medium18 Low2 not blocked91 Exploited15 Working exploit published76 2017177 Not applicable177 Critical1 High88 Medium88 not blocked177 Exploited22 Working exploit published153 Proof of concept only2 2018111 Outside Waratek scope1 Not applicable110 High83 Medium25 Low3 not blocked111 Exploited16 Working exploit published91 Proof of concept only4 201984 Not applicable84 Critical2 High64 Medium18 not blocked84 Exploited24 Working exploit published56 Proof of concept only4 202044 Not applicable44 Critical8 High31 Medium5 not blocked44 Exploited23 Working exploit published5 Proof of concept only16 202148 Not applicable48 Critical8 High28 Medium12 not blocked48 Exploited29 Working exploit published4 Proof of concept only15 202232 Not applicable32 Critical6 High21 Medium5 not blocked32 Exploited15 Working exploit published2 Proof of concept only15 202356 Mitigation candidate1 Outside Waratek scope2 Not applicable53 Critical5 High44 Medium7 not blocked56 Exploited24 Working exploit published14 Proof of concept only18 202444 Not applicable44 Critical7 High29 Medium8 not blocked44 Exploited18 Working exploit published4 Proof of concept only22 202558 Not applicable58 Critical6 High41 Medium11 not blocked58 Exploited21 Working exploit published17 Proof of concept only20 202655 Outside Waratek scope1 Not applicable54 Critical8 High39 Medium7 Low1 not blocked55 Exploited16 Working exploit published5 Proof of concept only34
19961999200220052008201120142017202020232026
1,857 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 19 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-124194 Medium 2026-11-10 Not applicable Exploited Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-111497 Critical 2026-10-22 Outside Waratek scope Exploited A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
CVE-2026-97798 High 2026-10-13 Not applicable Proof of concept only Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-97793 High 2026-10-13 Not applicable Proof of concept only Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
CVE-2026-85884 High 2026-10-13 Not applicable Proof of concept only Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83834 High 2026-10-13 Not applicable Proof of concept only Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83991 Medium 2026-09-08 Not applicable Proof of concept only Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.
CVE-2026-66804 High 2026-08-11 Not applicable Proof of concept only Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62911 High 2026-08-11 Not applicable Proof of concept only Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-62735 High 2026-08-11 Not applicable Proof of concept only Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-49179 High 2026-08-11 Not applicable Proof of concept only Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network.
CVE-2026-58644 Critical 2026-07-14 Not applicable Exploited Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
CVE-2026-58635 High 2026-07-14 Not applicable Proof of concept only Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
CVE-2026-55040 Critical 2026-07-14 Not applicable Exploited Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-54992 High 2026-07-14 Not applicable Proof of concept only Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.
CVE-2026-54121 High 2026-07-14 Not applicable Exploited Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.
CVE-2026-50679 High 2026-07-14 Not applicable Proof of concept only Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-50522 Critical 2026-07-14 Not applicable Exploited Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
CVE-2026-50416 Low 2026-07-14 Not applicable Proof of concept only Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-50343 High 2026-07-14 Not applicable Proof of concept only Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
CVE-2026-49176 High 2026-07-14 Not applicable Proof of concept only Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.
CVE-2026-47301 High 2026-07-14 Not applicable Proof of concept only Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
CVE-2026-58289 Critical 2026-07-03 Not applicable Working exploit published Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-50656 High 2026-06-16 Not applicable Proof of concept only Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".
CVE-2026-49160 High 2026-06-09 Not applicable Proof of concept only Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.
CVE-2026-45504 High 2026-06-09 Not applicable Proof of concept only Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-42980 High 2026-06-09 Not applicable Proof of concept only Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-42978 High 2026-06-09 Not applicable Proof of concept only Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-47644 High 2026-06-04 Not applicable Proof of concept only Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
CVE-2026-45585 Medium 2026-05-20 Not applicable Proof of concept only Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices. We are issuing this CVE to provide mitigation guidance that can be implemented to protect against this vulnerability until the security update is made available. Mitigation FAQs Should I leverage the temporary mitigation? Microsoft recommends that you consider implementing these mitigations if you are concerned your devices and data are at risk of being compromised or stolen. For example, if your organization’s employees take their work devices home or on business travel. What impact to service availability/management could be caused by implementing the mitigations? Implementing these mitigations will not impact service availability or management operations. Do customers need to revert the changes made to mitigate the vulnerability once the security update to protect against this vulnerability is available? No. The security update will maintain the mitigation's behavior once the security update is installed. I am using TPM+PIN, am I at risk of this vulnerability being exploited No, if you are using TPM+PIN the vulnerability is not exploitable.
CVE-2026-41091 High 2026-05-20 Not applicable Exploited Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
CVE-2026-42897 High 2026-05-14 Not applicable Exploited Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-41096 Critical 2026-05-12 Not applicable Proof of concept only Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-41089 Critical 2026-05-12 Not applicable Exploited Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVE-2026-40369 High 2026-05-12 Not applicable Proof of concept only Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-33829 Medium 2026-04-14 Not applicable Working exploit published Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-33825 High 2026-04-14 Not applicable Exploited Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.
CVE-2026-33824 Critical 2026-04-14 Not applicable Exploited Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
CVE-2026-32223 Medium 2026-04-14 Not applicable Proof of concept only Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-32202 Medium 2026-04-14 Not applicable Exploited Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-27912 High 2026-04-14 Not applicable Proof of concept only Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-26128 High 2026-03-10 Not applicable Proof of concept only Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.
CVE-2026-26114 High 2026-03-10 Not applicable Proof of concept only Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-24294 High 2026-03-10 Not applicable Proof of concept only Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.
CVE-2026-26119 High 2026-02-17 Not applicable Proof of concept only Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVE-2026-21514 High 2026-02-10 Not applicable Exploited Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-21510 High 2026-02-10 Not applicable Exploited Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-21508 High 2026-02-10 Not applicable Proof of concept only Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-21250 High 2026-02-10 Not applicable Working exploit published Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-21248 High 2026-02-10 Not applicable Working exploit published Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-21244 High 2026-02-10 Not applicable Working exploit published Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-20841 High 2026-02-10 Not applicable Proof of concept only Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute code locally.
CVE-2026-21509 High 2026-01-26 Not applicable Exploited Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-20817 High 2026-01-13 Not applicable Proof of concept only Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-20805 Medium 2026-01-13 Not applicable Exploited Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.
CVE-2025-14174 High 2025-12-12 Not applicable Exploited Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2025-54100 High 2025-12-09 Not applicable Proof of concept only Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute code locally.
CVE-2025-62215 High 2025-11-11 Not applicable Exploited Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-60710 High 2025-11-11 Not applicable Exploited Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
CVE-2025-59501 Medium 2025-10-31 Not applicable Proof of concept only Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
CVE-2025-59287 Critical 2025-10-14 Not applicable Exploited Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
CVE-2025-59284 Medium 2025-10-14 Not applicable Proof of concept only Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally.
CVE-2025-59254 High 2025-10-14 Not applicable Working exploit published Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2025-58726 High 2025-10-14 Not applicable Proof of concept only Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
CVE-2025-55315 Critical 2025-10-14 Not applicable Working exploit published Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
CVE-2025-24990 High 2025-10-14 Not applicable Exploited Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.
CVE-2025-54918 High 2025-09-09 Not applicable Proof of concept only Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.
CVE-2025-54110 High 2025-09-09 Not applicable Proof of concept only Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-9491 Medium 2025-08-26 Not applicable Exploited Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of .LNK files. Crafted data in an .LNK file can cause hazardous content in the file to be invisible to a user who inspects the file via the Windows-provided user interface. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25373.
CVE-2025-53779 High 2025-08-12 Not applicable Proof of concept only Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
CVE-2025-53772 High 2025-08-12 Not applicable Exploited Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.
CVE-2025-53136 Medium 2025-08-12 Not applicable Proof of concept only Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose information locally.
CVE-2025-50168 High 2025-08-12 Not applicable Proof of concept only Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2025-50165 Critical 2025-08-12 Not applicable Proof of concept only Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2025-50154 Medium 2025-08-12 Not applicable Working exploit published Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-53771 Medium 2025-07-20 Not applicable Exploited Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-53770 Critical 2025-07-20 Not applicable Exploited Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.
CVE-2025-49744 High 2025-07-08 Not applicable Working exploit published Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2025-49730 High 2025-07-08 Not applicable Working exploit published Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges locally.
CVE-2025-49706 Medium 2025-07-08 Not applicable Exploited Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-49704 High 2025-07-08 Not applicable Exploited Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-49683 High 2025-07-08 Not applicable Working exploit published Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally.
CVE-2025-49677 High 2025-07-08 Not applicable Working exploit published Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2025-48804 Medium 2025-07-08 Not applicable Proof of concept only Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2025-48799 High 2025-07-08 Not applicable Proof of concept only Improper link resolution before file access ('link following') in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2025-47987 High 2025-07-08 Not applicable Working exploit published Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally.
CVE-2025-47178 High 2025-07-08 Not applicable Proof of concept only Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network.
CVE-2025-49741 High 2025-07-01 Not applicable Working exploit published No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVE-2025-32711 Critical 2025-06-11 Not applicable Proof of concept only Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2025-47957 High 2025-06-10 Not applicable Working exploit published Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-47175 High 2025-06-10 Not applicable Working exploit published Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2025-47171 Medium 2025-06-10 Not applicable Working exploit published Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.
CVE-2025-47166 High 2025-06-10 Not applicable Working exploit published Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-47165 High 2025-06-10 Not applicable Exploited Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-33073 High 2025-06-10 Not applicable Exploited Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
CVE-2025-33053 High 2025-06-10 Not applicable Exploited External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
CVE-2025-32710 High 2025-06-10 Not applicable Proof of concept only Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVE-2025-5419 High 2025-06-03 Not applicable Exploited Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-47181 High 2025-05-22 Not applicable Proof of concept only Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
CVE-2025-47161 High 2025-05-15 Not applicable Working exploit published Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
‹ prev page 1 of 19 next ›