Overview 118 matches · 1 in Waratek scope · 0 protected · 2 exploited · 2 CISA KEV · 2 public PoC · 2 EPSS ≥ 0.5
118matches
1in Waratek scope0.8%
0protected0.0%
2exploited1.7%
2CISA KEV1.7%
2public PoC1.7%
2EPSS ≥ 0.51.7%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
1
0.8%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
117
99.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
118
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
2
1.7%
Working exploit published
0
0.0%
Proof of concept only
6
5.1%
Forecast only
1
0.8%
No public exploit
109
92.4%
split by
peak 23 / quarter
Q4 211
Not applicable1
High1
not blocked1
No public exploit1
Q1 222
Not applicable2
High2
not blocked2
No public exploit2
Q2 225
Not applicable5
High5
not blocked5
No public exploit5
Q3 225
Not applicable5
High5
not blocked5
Proof of concept only1
No public exploit4
Q4 222
Not applicable2
High2
not blocked2
No public exploit2
Q1 234
Not applicable4
High4
not blocked4
No public exploit4
Q2 238
Not applicable8
High8
not blocked8
No public exploit8
Q3 2311
Not applicable11
High11
not blocked11
Exploited1
No public exploit10
Q4 233
Mitigation candidate1
Not applicable2
High3
not blocked3
Exploited1
Proof of concept only1
Forecast only1
Q1 246
Not applicable6
High6
not blocked6
Proof of concept only3
No public exploit3
Q2 2411
Not applicable11
High11
not blocked11
Proof of concept only1
No public exploit10
Q3 245
Not applicable5
High5
not blocked5
No public exploit5
Q4 246
Not applicable6
High6
not blocked6
No public exploit6
Q1 259
Not applicable9
High9
not blocked9
No public exploit9
Q2 257
Not applicable7
High7
not blocked7
No public exploit7
Q3 252
Not applicable2
High2
not blocked2
No public exploit2
Q4 251
Not applicable1
High1
not blocked1
No public exploit1
Q1 262
Not applicable2
High2
not blocked2
No public exploit2
Q2 263
Not applicable3
High3
not blocked3
No public exploit3
Q3 2623
Not applicable23
High23
not blocked23
No public exploit23
Q4 262
Not applicable2
High2
not blocked2
No public exploit2
Q4 21Q2 22Q4 22Q2 23Q4 23Q2 24Q4 24Q2 25Q4 25Q2 26Q4 26
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-96957 | High | 2026-10-13 | Not applicable | No public exploit | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-96222 | High | 2026-10-13 | Not applicable | No public exploit | Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-71328 | High | 2026-09-08 | Not applicable | No public exploit | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69806 | High | 2026-09-08 | Not applicable | No public exploit | Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69805 | High | 2026-09-08 | Not applicable | No public exploit | External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-69439 | High | 2026-09-08 | Not applicable | No public exploit | Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-70354 | High | 2026-08-11 | Not applicable | No public exploit | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. |
| CVE-2026-62909 | High | 2026-08-11 | Not applicable | No public exploit | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62901 | High | 2026-08-11 | Not applicable | No public exploit | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-62898 | High | 2026-08-11 | Not applicable | No public exploit | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-62897 | High | 2026-08-11 | Not applicable | No public exploit | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. |
| CVE-2026-62886 | High | 2026-08-11 | Not applicable | No public exploit | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-62871 | High | 2026-08-11 | Not applicable | No public exploit | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. |
| CVE-2026-50651 | High | 2026-07-14 | Not applicable | No public exploit | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50648 | High | 2026-07-14 | Not applicable | No public exploit | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50646 | High | 2026-07-14 | Not applicable | No public exploit | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. |
| CVE-2026-50528 | High | 2026-07-14 | Not applicable | No public exploit | Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-50527 | High | 2026-07-14 | Not applicable | No public exploit | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50526 | High | 2026-07-14 | Not applicable | No public exploit | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally. |
| CVE-2026-50525 | High | 2026-07-14 | Not applicable | No public exploit | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-50524 | High | 2026-07-14 | Not applicable | No public exploit | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. |
| CVE-2026-47305 | High | 2026-07-14 | Not applicable | No public exploit | Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally. |
| CVE-2026-47303 | High | 2026-07-14 | Not applicable | No public exploit | Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-47302 | High | 2026-07-14 | Not applicable | No public exploit | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-47300 | High | 2026-07-14 | Not applicable | No public exploit | Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-32177 | High | 2026-05-12 | Not applicable | No public exploit | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-32203 | High | 2026-04-14 | Not applicable | No public exploit | Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network. |
| CVE-2026-32178 | High | 2026-04-14 | Not applicable | No public exploit | Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-21257 | High | 2026-02-10 | Not applicable | No public exploit | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-21256 | High | 2026-02-10 | Not applicable | No public exploit | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code over a network. |
| CVE-2025-55240 | High | 2025-10-14 | Not applicable | No public exploit | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. |
| CVE-2025-53773 | High | 2025-08-12 | Not applicable | No public exploit | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally. |
| CVE-2025-49739 | High | 2025-07-08 | Not applicable | No public exploit | Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2025-47959 | High | 2025-06-13 | Not applicable | No public exploit | Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network. |
| CVE-2025-30399 | High | 2025-06-13 | Not applicable | No public exploit | Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network. |
| CVE-2025-32702 | High | 2025-05-13 | Not applicable | No public exploit | Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally. |
| CVE-2025-26646 | High | 2025-05-13 | Not applicable | No public exploit | External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network. |
| CVE-2025-29804 | High | 2025-04-08 | Not applicable | No public exploit | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. |
| CVE-2025-29802 | High | 2025-04-08 | Not applicable | No public exploit | Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally. |
| CVE-2025-26682 | High | 2025-04-08 | Not applicable | No public exploit | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2025-25003 | High | 2025-03-11 | Not applicable | No public exploit | Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally. |
| CVE-2025-24998 | High | 2025-03-11 | Not applicable | No public exploit | Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally. |
| CVE-2025-24070 | High | 2025-03-11 | Not applicable | No public exploit | Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2025-21206 | High | 2025-02-11 | Not applicable | No public exploit | Visual Studio Installer Elevation of Privilege Vulnerability |
| CVE-2025-21405 | High | 2025-01-14 | Not applicable | No public exploit | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2025-21178 | High | 2025-01-14 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2025-21173 | High | 2025-01-14 | Not applicable | No public exploit | .NET Elevation of Privilege Vulnerability |
| CVE-2025-21172 | High | 2025-01-14 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2025-21171 | High | 2025-01-14 | Not applicable | No public exploit | .NET Remote Code Execution Vulnerability |
| CVE-2024-43499 | High | 2024-11-12 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2024-43590 | High | 2024-10-08 | Not applicable | No public exploit | Visual C++ Redistributable Installer Elevation of Privilege Vulnerability |
| CVE-2024-43485 | High | 2024-10-08 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2024-43484 | High | 2024-10-08 | Not applicable | No public exploit | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability |
| CVE-2024-43483 | High | 2024-10-08 | Not applicable | No public exploit | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability |
| CVE-2024-38229 | High | 2024-10-08 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2024-38168 | High | 2024-08-13 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2024-38095 | High | 2024-07-09 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2024-38081 | High | 2024-07-09 | Not applicable | No public exploit | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2024-35264 | High | 2024-07-09 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2024-30105 | High | 2024-07-09 | Not applicable | No public exploit | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2024-28938 | High | 2024-04-09 | Not applicable | Proof of concept only | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28937 | High | 2024-04-09 | Not applicable | No public exploit | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28936 | High | 2024-04-09 | Not applicable | No public exploit | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28935 | High | 2024-04-09 | Not applicable | No public exploit | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28934 | High | 2024-04-09 | Not applicable | No public exploit | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28933 | High | 2024-04-09 | Not applicable | No public exploit | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28932 | High | 2024-04-09 | Not applicable | No public exploit | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28931 | High | 2024-04-09 | Not applicable | No public exploit | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28930 | High | 2024-04-09 | Not applicable | No public exploit | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-28929 | High | 2024-04-09 | Not applicable | No public exploit | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-21409 | High | 2024-04-09 | Not applicable | No public exploit | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
| CVE-2024-26190 | High | 2024-03-12 | Not applicable | No public exploit | Microsoft QUIC Denial of Service Vulnerability |
| CVE-2024-21392 | High | 2024-03-12 | Not applicable | Proof of concept only | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2024-21404 | High | 2024-02-13 | Not applicable | Proof of concept only | .NET Denial of Service Vulnerability |
| CVE-2024-21386 | High | 2024-02-13 | Not applicable | No public exploit | .NET Denial of Service Vulnerability |
| CVE-2024-20656 | High | 2024-01-09 | Not applicable | Proof of concept only | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2024-0056 | High | 2024-01-09 | Not applicable | No public exploit | Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability |
| CVE-2023-36038 | High | 2023-11-14 | Not applicable | Proof of concept only | ASP.NET Core Denial of Service Vulnerability |
| CVE-2023-44487 | High | 2023-10-10 | Mitigation candidate | Exploited | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
| CVE-2023-38171 | High | 2023-10-10 | Not applicable | Forecast only | Microsoft QUIC Denial of Service Vulnerability |
| CVE-2023-36796 | High | 2023-09-12 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36794 | High | 2023-09-12 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36793 | High | 2023-09-12 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-36792 | High | 2023-09-12 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-38180 | High | 2023-08-08 | Not applicable | Exploited | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2023-38178 | High | 2023-08-08 | Not applicable | No public exploit | .NET Core and Visual Studio Denial of Service Vulnerability |
| CVE-2023-36897 | High | 2023-08-08 | Not applicable | No public exploit | Visual Studio Tools for Office Runtime Spoofing Vulnerability |
| CVE-2023-35391 | High | 2023-08-08 | Not applicable | No public exploit | ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability |
| CVE-2023-35390 | High | 2023-08-08 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-33170 | High | 2023-07-11 | Not applicable | No public exploit | ASP.NET and Visual Studio Security Feature Bypass Vulnerability |
| CVE-2023-33127 | High | 2023-07-11 | Not applicable | No public exploit | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-33135 | High | 2023-06-14 | Not applicable | No public exploit | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-33128 | High | 2023-06-14 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-33126 | High | 2023-06-14 | Not applicable | No public exploit | .NET and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-24897 | High | 2023-06-14 | Not applicable | No public exploit | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-24895 | High | 2023-06-14 | Not applicable | No public exploit | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-28296 | High | 2023-04-11 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-28262 | High | 2023-04-11 | Not applicable | No public exploit | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-28260 | High | 2023-04-11 | Not applicable | No public exploit | .NET DLL Hijacking Remote Code Execution Vulnerability |
| CVE-2023-23381 | High | 2023-02-14 | Not applicable | No public exploit | Visual Studio Remote Code Execution Vulnerability |