WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor microsoft✕
Overview 686 matches · 2 in Waratek scope · 0 protected · 56 exploited · 41 CISA KEV · 59 public PoC · 63 EPSS ≥ 0.5
686matches 2in Waratek scope0.3% 0protected0.0% 56exploited8.2% 41CISA KEV6.0% 59public PoC8.6% 63EPSS ≥ 0.59.2%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 0.3% Outside Waratek scope 2 0.3% Not applicable 682 99.4% Withdrawn CVE 0 0.0%
Critical 686 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 686 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 56 8.2% Working exploit published 7 1.0% Proof of concept only 27 3.9% Forecast only 12 1.7% No public exploit 584 85.1%
split by peak 295 / year
Not applicable: 682Outside Waratek scope: 2No exploit published: 2 Critical: 686 not blocked: 686 No public exploit: 584Forecast only: 12Proof of concept only: 27Working exploit published: 7Exploited: 56
19971 Not applicable1 Critical1 not blocked1 No public exploit1 19980 19990 20001 Not applicable1 Critical1 not blocked1 No public exploit1 20010 20021 Not applicable1 Critical1 not blocked1 Forecast only1 20030 20041 Not applicable1 Critical1 not blocked1 Exploited1 20050 20060 20070 20083 Not applicable3 Critical3 not blocked3 Exploited2 No public exploit1 20093 Not applicable3 Critical3 not blocked3 No public exploit3 20100 20113 Not applicable3 Critical3 not blocked3 Exploited1 Working exploit published1 Forecast only1 20122 Not applicable2 Critical2 not blocked2 No public exploit2 20131 Not applicable1 Critical1 not blocked1 No public exploit1 20141 Not applicable1 Critical1 not blocked1 Exploited1 20153 Not applicable3 Critical3 not blocked3 Exploited3 20168 Not applicable8 Critical8 not blocked8 Working exploit published1 Forecast only1 No public exploit6 201713 Not applicable13 Critical13 not blocked13 Exploited2 Forecast only1 No public exploit10 201812 Not applicable12 Critical12 not blocked12 Forecast only1 No public exploit11 201932 Not applicable32 Critical32 not blocked32 Exploited2 Proof of concept only2 Forecast only5 No public exploit23 202039 No exploit published1 Not applicable38 Critical39 not blocked39 Exploited9 Working exploit published1 No public exploit29 202157 Not applicable57 Critical57 not blocked57 Exploited8 Working exploit published1 Proof of concept only2 Forecast only1 No public exploit45 202228 Not applicable28 Critical28 not blocked28 Exploited6 Proof of concept only6 No public exploit16 202353 Outside Waratek scope1 Not applicable52 Critical53 not blocked53 Exploited4 Proof of concept only2 Forecast only1 No public exploit46 202465 Not applicable65 Critical65 not blocked65 Exploited6 Working exploit published1 Proof of concept only7 No public exploit51 202564 Not applicable64 Critical64 not blocked64 Exploited3 Working exploit published1 Proof of concept only5 No public exploit55 2026295 No exploit published1 Outside Waratek scope1 Not applicable293 Critical295 not blocked295 Exploited8 Working exploit published1 Proof of concept only3 No public exploit283
1999200220052008201120142017202020232026
686 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 7 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-111497 Critical 2026-10-22 Outside Waratek scope Exploited A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
CVE-2026-97816 Critical 2026-10-13 Not applicable No public exploit Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-97815 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-97814 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-97805 Critical 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-97749 Critical 2026-10-13 Not applicable No public exploit Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-97016 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-96934 Critical 2026-10-13 Not applicable No public exploit Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96924 Critical 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
CVE-2026-96909 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
CVE-2026-96864 Critical 2026-10-13 Not applicable No public exploit Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-96320 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96252 Critical 2026-10-13 Not applicable No public exploit Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-96219 Critical 2026-10-13 Not applicable No public exploit Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
CVE-2026-96113 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-96096 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVE-2026-88178 Critical 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-88156 Critical 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-88102 Critical 2026-10-13 Not applicable No public exploit Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-88092 Critical 2026-10-13 Not applicable No public exploit Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
CVE-2026-85928 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-85818 Critical 2026-10-13 Not applicable No public exploit Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-85814 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-85809 Critical 2026-10-13 Not applicable No public exploit Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-85806 Critical 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
CVE-2026-85792 Critical 2026-10-13 Not applicable No public exploit Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-84015 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.
CVE-2026-83935 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
CVE-2026-83910 Critical 2026-10-13 Not applicable No public exploit Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-83888 Critical 2026-10-13 Not applicable No public exploit Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83869 Critical 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83789 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83782 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-83780 Critical 2026-10-13 Not applicable No public exploit Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-83770 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-83748 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83693 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83578 Critical 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
CVE-2026-83523 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
CVE-2026-83519 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83517 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-70300 Critical 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70291 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70275 Critical 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70262 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70242 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70157 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
CVE-2026-70153 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70147 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70024 Critical 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
CVE-2026-69886 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69883 Critical 2026-10-13 Not applicable No public exploit Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69705 Critical 2026-10-13 Not applicable No public exploit Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69639 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
CVE-2026-69634 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-105723 Critical 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-105010 Critical 2026-10-13 Not applicable No public exploit Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-105008 Critical 2026-10-13 Not applicable No public exploit No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-102238 Critical 2026-10-13 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-102210 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-100222 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
CVE-2026-100219 Critical 2026-10-13 Not applicable No public exploit Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2026-100202 Critical 2026-10-13 Not applicable No public exploit Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
CVE-2026-96207 Critical 2026-10-08 Not applicable No public exploit Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-88131 Critical 2026-10-08 Not applicable No public exploit Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
CVE-2026-69435 Critical 2026-10-08 Not applicable No public exploit Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
CVE-2026-85878 Critical 2026-09-18 Not applicable No public exploit Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.
CVE-2026-69843 Critical 2026-09-18 Not applicable No public exploit Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62874 Critical 2026-09-18 Not applicable No public exploit Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-87701 Critical 2026-09-17 Not applicable No public exploit Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
CVE-2026-85889 Critical 2026-09-17 Not applicable No public exploit Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-85885 Critical 2026-09-17 Not applicable No public exploit Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
CVE-2026-83944 Critical 2026-09-17 Not applicable No public exploit Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-77903 Critical 2026-09-17 Not applicable No public exploit Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70200 Critical 2026-09-17 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70009 Critical 2026-09-17 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69865 Critical 2026-09-17 Not applicable No public exploit Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69399 Critical 2026-09-17 Not applicable No public exploit Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network.
CVE-2026-83941 Critical 2026-09-08 Not applicable No public exploit Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
CVE-2026-81376 Critical 2026-09-08 Not applicable No public exploit Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-78509 Critical 2026-09-08 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78445 Critical 2026-09-08 Not applicable No public exploit Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-77493 Critical 2026-09-08 Not applicable No public exploit Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73025 Critical 2026-09-08 Not applicable No public exploit Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-73010 Critical 2026-09-08 Not applicable No public exploit Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-73009 Critical 2026-09-08 Not applicable No public exploit Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-72983 Critical 2026-09-08 Not applicable No public exploit Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
CVE-2026-72982 Critical 2026-09-08 Not applicable No public exploit Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVE-2026-72979 Critical 2026-09-08 Not applicable No public exploit Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-72950 Critical 2026-09-08 Not applicable No public exploit Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-70296 Critical 2026-09-08 Not applicable No public exploit Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69910 Critical 2026-09-08 Not applicable No public exploit Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
CVE-2026-69854 Critical 2026-09-08 Not applicable No public exploit Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69845 Critical 2026-09-08 Not applicable No public exploit Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69829 Critical 2026-09-08 Not applicable No public exploit Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-69824 Critical 2026-09-08 Not applicable No public exploit Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.
CVE-2026-69819 Critical 2026-09-08 Not applicable No public exploit Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-69769 Critical 2026-09-08 Not applicable No public exploit Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
CVE-2026-69768 Critical 2026-09-08 Not applicable No public exploit Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
CVE-2026-69730 Critical 2026-09-08 Not applicable No public exploit Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
‹ prev page 1 of 7 next ›