WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product server✕
Overview 13,167 matches · 593 in Waratek scope · 104 protected · 487 exploited · 300 CISA KEV · 1,272 public PoC · 512 EPSS ≥ 0.5
split by peak 2,814 / year
Not applicable: 12,207Outside Waratek scope: 367No exploit published: 465Mitigation candidate: 20Rule in development: 2Protected by Waratek: 106 High: 13,167 not blocked: 13,061partly blocked: 2blocked by ARMR today: 104 No public exploit: 11,396Forecast only: 116Proof of concept only: 312Working exploit published: 856Exploited: 487
19931 Not applicable1 High1 not blocked1 No public exploit1 19944 Not applicable4 High4 not blocked4 No public exploit4 19951 Not applicable1 High1 not blocked1 Working exploit published1 19965 Not applicable5 High5 not blocked5 Working exploit published2 Forecast only1 No public exploit2 199710 Not applicable10 High10 not blocked10 Working exploit published2 No public exploit8 199814 Not applicable14 High14 not blocked14 Working exploit published6 No public exploit8 199951 No exploit published1 Not applicable50 High51 not blocked51 Working exploit published19 No public exploit32 200060 Mitigation candidate2 No exploit published3 Outside Waratek scope2 Not applicable53 High60 not blocked60 Exploited1 Working exploit published25 Forecast only1 No public exploit33 2001102 Protected by Waratek1 No exploit published3 Outside Waratek scope4 Not applicable94 High102 blocked by ARMR today1 not blocked101 Exploited3 Working exploit published27 No public exploit72 2002151 Protected by Waratek1 Mitigation candidate1 No exploit published5 Outside Waratek scope7 Not applicable137 High151 blocked by ARMR today1 not blocked150 Exploited3 Working exploit published49 Forecast only3 No public exploit96 200378 No exploit published2 Outside Waratek scope4 Not applicable72 High78 not blocked78 Exploited5 Working exploit published30 No public exploit43 2004141 No exploit published4 Outside Waratek scope3 Not applicable134 High141 not blocked141 Exploited3 Working exploit published43 No public exploit95 2005211 No exploit published13 Outside Waratek scope8 Not applicable190 High211 not blocked211 Exploited3 Working exploit published54 Forecast only3 No public exploit151 2006250 Protected by Waratek1 No exploit published32 Outside Waratek scope61 Not applicable156 High250 blocked by ARMR today1 not blocked249 Exploited2 Working exploit published52 Proof of concept only1 Forecast only3 No public exploit192 2007264 No exploit published35 Outside Waratek scope16 Not applicable213 High264 not blocked264 Exploited7 Working exploit published53 Forecast only2 No public exploit202 2008239 No exploit published17 Outside Waratek scope15 Not applicable207 High239 not blocked239 Exploited3 Working exploit published44 Proof of concept only1 Forecast only4 No public exploit187 2009240 No exploit published13 Outside Waratek scope7 Not applicable220 High240 not blocked240 Exploited23 Working exploit published34 No public exploit183 2010209 Protected by Waratek1 No exploit published4 Outside Waratek scope8 Not applicable196 High209 blocked by ARMR today1 not blocked208 Exploited10 Working exploit published48 Forecast only6 No public exploit145 2011176 Mitigation candidate1 No exploit published2 Outside Waratek scope5 Not applicable168 High176 not blocked176 Exploited8 Working exploit published22 Forecast only1 No public exploit145 2012158 Protected by Waratek1 No exploit published3 Outside Waratek scope3 Not applicable151 High158 blocked by ARMR today1 not blocked157 Exploited9 Working exploit published10 Proof of concept only3 Forecast only1 No public exploit135 2013214 Protected by Waratek3 No exploit published3 Outside Waratek scope9 Not applicable199 High214 blocked by ARMR today3 not blocked211 Exploited16 Working exploit published15 Proof of concept only1 Forecast only5 No public exploit177 2014172 No exploit published2 Outside Waratek scope9 Not applicable161 High172 not blocked172 Exploited19 Working exploit published16 No public exploit137 2015275 No exploit published3 Outside Waratek scope16 Not applicable256 High275 not blocked275 Exploited15 Working exploit published50 Forecast only2 No public exploit208 2016372 Protected by Waratek2 Mitigation candidate2 No exploit published12 Outside Waratek scope15 Not applicable341 High372 blocked by ARMR today2 not blocked370 Exploited19 Working exploit published49 Proof of concept only1 Forecast only9 No public exploit294 2017428 Protected by Waratek12 Mitigation candidate1 No exploit published21 Outside Waratek scope22 Not applicable372 High428 blocked by ARMR today10 partly blocked2 not blocked416 Exploited32 Working exploit published44 Proof of concept only2 Forecast only3 No public exploit347 2018644 Protected by Waratek9 No exploit published26 Outside Waratek scope41 Not applicable568 High644 blocked by ARMR today9 not blocked635 Exploited31 Working exploit published44 Proof of concept only4 Forecast only3 No public exploit562 2019675 Protected by Waratek4 No exploit published17 Outside Waratek scope57 Not applicable597 High675 blocked by ARMR today4 not blocked671 Exploited44 Working exploit published55 Proof of concept only14 Forecast only10 No public exploit552 20201,037 Protected by Waratek14 Mitigation candidate4 No exploit published41 Outside Waratek scope25 Not applicable953 High1,037 blocked by ARMR today14 not blocked1,023 Exploited30 Working exploit published11 Proof of concept only16 Forecast only8 No public exploit972 2021757 Protected by Waratek18 Mitigation candidate3 No exploit published34 Outside Waratek scope20 Not applicable682 High757 blocked by ARMR today18 not blocked739 Exploited45 Working exploit published7 Proof of concept only12 Forecast only12 No public exploit681 2022786 Protected by Waratek9 Rule in development1 Mitigation candidate1 No exploit published17 Outside Waratek scope6 Not applicable752 High786 blocked by ARMR today9 not blocked777 Exploited33 Working exploit published9 Proof of concept only32 Forecast only15 No public exploit697 2023828 Protected by Waratek9 Mitigation candidate1 No exploit published21 Outside Waratek scope1 Not applicable796 High828 blocked by ARMR today9 not blocked819 Exploited37 Working exploit published7 Proof of concept only47 Forecast only15 No public exploit722 2024845 Protected by Waratek9 Mitigation candidate2 No exploit published20 Outside Waratek scope1 Not applicable813 High845 blocked by ARMR today9 not blocked836 Exploited35 Working exploit published10 Proof of concept only48 Forecast only8 No public exploit744 2025955 Protected by Waratek2 Rule in development1 Mitigation candidate1 No exploit published29 Outside Waratek scope2 Not applicable920 High955 blocked by ARMR today2 not blocked953 Exploited29 Working exploit published10 Proof of concept only56 Forecast only1 No public exploit859 20262,814 Protected by Waratek10 Mitigation candidate1 No exploit published82 Not applicable2,721 High2,814 blocked by ARMR today10 not blocked2,804 Exploited22 Working exploit published8 Proof of concept only74 No public exploit2,710
199319961999200220052008201120142017202020232026
13,167 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 132 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-119618 High 2026-11-11 Not applicable Proof of concept only Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of mod_h2 from GitHub: from 2.0.8 through 2.0.42.
CVE-2026-118711 High 2026-11-10 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118710 High 2026-11-10 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118709 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118708 High 2026-11-10 Not applicable No public exploit Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118707 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118706 High 2026-11-10 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118705 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118704 High 2026-11-10 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118703 High 2026-11-10 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118701 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118700 High 2026-11-10 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118302 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118301 High 2026-11-10 Not applicable No public exploit Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118299 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118298 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118297 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118296 High 2026-11-10 Not applicable No public exploit Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118295 High 2026-11-10 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118294 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118293 High 2026-11-10 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118292 High 2026-11-10 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-116927 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120733 High 2026-11-03 Not applicable No public exploit Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the database or a database backup to obtain users' TOTP shared secrets via the unencrypted copy of the security key written when an administrator saves a user.
CVE-2026-120715 High 2026-11-03 Not applicable No public exploit Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an authenticated low-privileged user to capture the NetNTLMv2 hash of the DVLS service account via an attacker-controlled domain name in the request.
CVE-2026-119636 High 2026-11-03 Not applicable No public exploit Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.22.0 allows an authenticated user with checkout rights on a PAM account to retain access to that account on the target system after the checkout expires via a backlog of 21 or more newer active checkouts that prevents the expired checkout from being checked in and its password from being rotated.
CVE-2026-112085 High 2026-10-22 Not applicable No public exploit webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to forward WebSockets, the server forwards non-HMR WebSocket upgrade requests to the proxy target without validating the Host or Origin headers, so the allowedHosts protection does not apply to those proxied upgrades. A malicious web page visited by a developer can open a cross-origin WebSocket through the dev server and read from and write to the proxied backend, even when the server is bound to loopback. The issue is fixed in webpack-dev-server 5.2.7 and 6.1.0, where proxied WebSocket upgrades pass the same Host and Origin validation as the HMR WebSocket, and users should upgrade to one of those versions or later. As a workaround, omit WebSocket forwarding from proxy entries that do not need it and scope the proxy to specific paths.
CVE-2026-91502 High 2026-10-20 No exploit published No public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L).
CVE-2026-91473 High 2026-10-20 Not applicable No public exploit Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in takeover of Oracle HTTP Server. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-91419 High 2026-10-20 Not applicable No public exploit Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in takeover of Oracle HTTP Server. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-87300 High 2026-10-20 Not applicable No public exploit Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle Weblogic Server Proxy Plug-in accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N).
CVE-2026-111764 High 2026-10-20 No exploit published Proof of concept only A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no authorization on task reads: the no-argument constructor sets authorizationProvider to null, and InMemoryTaskStore.get(String taskId) returns the stored task without checking the caller or owner. Authorization depends on supplying a TaskAuthorizationProvider and routing requests through AuthorizationRequestHandlerDecorator, whether installed through CDI or explicitly by the application. Default store wiring and manually constructed DefaultRequestHandler.builder().build() handlers, including integrations such as Spring, leave task reads unprotected when no effective authorization-provider and decorator check is installed. In a multi-caller deployment using the default configuration, a caller who knows or guesses another caller's task ID can retrieve the task status, context ID, message history, and artifacts. The default/reference transport endpoints do not enforce authentication, so the task-read disclosure is reachable by an unauthenticated caller rather than requiring a privileged account. This issue is fixed in version 1.3.0.Final.
CVE-2026-101781 High 2026-10-20 Not applicable No public exploit Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-101775 High 2026-10-20 Not applicable No public exploit Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server, MySQL Cluster accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H).
CVE-2026-101773 High 2026-10-20 Not applicable No public exploit Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster as well as unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H).
CVE-2026-101772 High 2026-10-20 Not applicable No public exploit Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-101771 High 2026-10-20 Not applicable No public exploit Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-101770 High 2026-10-20 Not applicable No public exploit Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-16453 High 2026-10-16 Not applicable No public exploit Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to verify the integrity of the SAML RelayState POST parameter which allows an authenticated SAML user to join any team, including invite-only teams, via forging the team_id or invite_id fields in the RelayState.. Mattermost Advisory ID: MMSA-2026-00727
CVE-2026-108452 High 2026-10-15 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-108446 High 2026-10-15 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-88164 High 2026-10-14 Not applicable No public exploit Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-97830 High 2026-10-13 Not applicable No public exploit Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
CVE-2026-97812 High 2026-10-13 Not applicable No public exploit Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97811 High 2026-10-13 Not applicable No public exploit Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-97810 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97809 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97808 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97807 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97806 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97804 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2026-97798 High 2026-10-13 Not applicable Proof of concept only Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-97794 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97793 High 2026-10-13 Not applicable Proof of concept only Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
CVE-2026-97792 High 2026-10-13 Not applicable No public exploit Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97789 High 2026-10-13 Not applicable No public exploit Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-97788 High 2026-10-13 Not applicable No public exploit Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
CVE-2026-97787 High 2026-10-13 Not applicable No public exploit Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97783 High 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-97780 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97778 High 2026-10-13 Not applicable No public exploit Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97777 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97776 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97775 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97773 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97772 High 2026-10-13 Not applicable No public exploit Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97771 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97770 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97769 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97768 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97767 High 2026-10-13 Not applicable No public exploit Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97766 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97765 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97763 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97762 High 2026-10-13 Not applicable No public exploit Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97758 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97757 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97756 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97755 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97754 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97753 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97752 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97751 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97750 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97748 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97747 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97746 High 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97742 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97739 High 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97738 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97017 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97010 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97008 High 2026-10-13 Not applicable No public exploit Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97007 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97004 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97003 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-96956 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-96953 High 2026-10-13 Not applicable No public exploit Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.
CVE-2026-96952 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-96951 High 2026-10-13 Not applicable Exploited Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
‹ prev page 1 of 132 next ›