WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor microsoft✕
Overview 11,913 matches · 3 in Waratek scope · 0 protected · 561 exploited · 332 CISA KEV · 1,184 public PoC · 539 EPSS ≥ 0.5
11,913matches 3in Waratek scope0.0% 0protected0.0% 561exploited4.7% 332CISA KEV2.8% 1,184public PoC9.9% 539EPSS ≥ 0.54.5%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 0.0% No exploit published 2 0.0% Outside Waratek scope 4 0.0% Not applicable 11,906 99.9% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 11,913 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 11,913 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 561 4.7% Working exploit published 799 6.7% Proof of concept only 143 1.2% Forecast only 91 0.8% No public exploit 10,319 86.6%
split by peak 3,022 / year
Not applicable: 11,906Outside Waratek scope: 4No exploit published: 2Mitigation candidate: 1 High: 11,913 not blocked: 11,913 No public exploit: 10,319Forecast only: 91Proof of concept only: 143Working exploit published: 799Exploited: 561
19961 Not applicable1 High1 not blocked1 Working exploit published1 199715 Not applicable15 High15 not blocked15 Working exploit published2 No public exploit13 199811 Not applicable11 High11 not blocked11 Working exploit published2 No public exploit9 199970 Not applicable70 High70 not blocked70 Exploited1 Working exploit published16 No public exploit53 200044 Not applicable44 High44 not blocked44 Exploited1 Working exploit published11 No public exploit32 200163 Not applicable63 High63 not blocked63 Exploited5 Working exploit published15 No public exploit43 2002127 Outside Waratek scope1 Not applicable126 High127 not blocked127 Exploited2 Working exploit published29 Forecast only3 No public exploit93 200355 Not applicable55 High55 not blocked55 Exploited4 Working exploit published27 No public exploit24 200471 Outside Waratek scope1 Not applicable70 High71 not blocked71 Exploited9 Working exploit published22 No public exploit40 200577 Not applicable77 High77 not blocked77 Exploited5 Working exploit published24 Forecast only2 No public exploit46 2006133 Not applicable133 High133 not blocked133 Exploited18 Working exploit published39 Forecast only3 No public exploit73 2007158 Not applicable158 High158 not blocked158 Exploited10 Working exploit published44 Forecast only4 No public exploit100 2008165 Not applicable165 High165 not blocked165 Exploited12 Working exploit published35 Proof of concept only1 Forecast only5 No public exploit112 2009174 No exploit published1 Not applicable173 High174 not blocked174 Exploited26 Working exploit published18 No public exploit130 2010238 Not applicable238 High238 not blocked238 Exploited17 Working exploit published60 Forecast only6 No public exploit155 2011198 Not applicable198 High198 not blocked198 Exploited13 Working exploit published20 Forecast only1 No public exploit164 2012120 Not applicable120 High120 not blocked120 Exploited11 Working exploit published7 Forecast only3 No public exploit99 2013253 Not applicable253 High253 not blocked253 Exploited16 Working exploit published29 Forecast only6 No public exploit202 2014298 Not applicable298 High298 not blocked298 Exploited19 Working exploit published65 No public exploit214 2015388 Outside Waratek scope1 Not applicable387 High388 not blocked388 Exploited18 Working exploit published65 Forecast only3 No public exploit302 2016359 Not applicable359 High359 not blocked359 Exploited33 Working exploit published55 Forecast only4 No public exploit267 2017396 Not applicable396 High396 not blocked396 Exploited36 Working exploit published67 Proof of concept only1 Forecast only2 No public exploit290 2018439 Not applicable439 High439 not blocked439 Exploited30 Working exploit published65 Proof of concept only3 Forecast only1 No public exploit340 2019486 Not applicable486 High486 not blocked486 Exploited38 Working exploit published41 Proof of concept only9 Forecast only3 No public exploit395 2020909 Not applicable909 High909 not blocked909 Exploited36 Working exploit published4 Proof of concept only12 Forecast only5 No public exploit852 2021646 Not applicable646 High646 not blocked646 Exploited54 Working exploit published3 Proof of concept only6 Forecast only9 No public exploit574 2022651 Not applicable651 High651 not blocked651 Exploited25 Working exploit published2 Proof of concept only15 Forecast only10 No public exploit599 2023696 Mitigation candidate1 Outside Waratek scope1 Not applicable694 High696 not blocked696 Exploited31 Working exploit published12 Proof of concept only23 Forecast only13 No public exploit617 2024790 Not applicable790 High790 not blocked790 Exploited37 Working exploit published2 Proof of concept only29 Forecast only6 No public exploit716 2025860 No exploit published1 Not applicable859 High860 not blocked860 Exploited30 Working exploit published14 Proof of concept only14 Forecast only2 No public exploit800 20263,022 Not applicable3,022 High3,022 not blocked3,022 Exploited24 Working exploit published3 Proof of concept only30 No public exploit2,965
19961999200220052008201120142017202020232026
11,913 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 120 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-96203 High 2026-10-29 Not applicable No public exploit Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-96199 High 2026-10-29 Not applicable No public exploit Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-96198 High 2026-10-29 Not applicable No public exploit Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-96196 High 2026-10-29 Not applicable No public exploit Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96192 High 2026-10-29 Not applicable No public exploit Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.
CVE-2026-96187 High 2026-10-29 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVE-2026-88077 High 2026-10-29 Not applicable No public exploit Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-85899 High 2026-10-29 Not applicable No public exploit Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.
CVE-2026-85897 High 2026-10-29 Not applicable No public exploit Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-85890 High 2026-10-29 Not applicable No public exploit Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-85898 High 2026-10-27 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-83831 High 2026-10-27 Not applicable No public exploit Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-62765 High 2026-10-27 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-108452 High 2026-10-15 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-108451 High 2026-10-15 Not applicable No public exploit Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108450 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108449 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108448 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-108447 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108446 High 2026-10-15 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-108445 High 2026-10-15 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108444 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-108443 High 2026-10-15 Not applicable No public exploit Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108442 High 2026-10-15 Not applicable No public exploit Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108441 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108440 High 2026-10-15 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108439 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108437 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108433 High 2026-10-15 Not applicable No public exploit Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-108432 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108431 High 2026-10-15 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108430 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108429 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108428 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108427 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108426 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88164 High 2026-10-14 Not applicable No public exploit Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-97830 High 2026-10-13 Not applicable No public exploit Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
CVE-2026-97812 High 2026-10-13 Not applicable No public exploit Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97811 High 2026-10-13 Not applicable No public exploit Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-97810 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97809 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97808 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97807 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97806 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97804 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2026-97803 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-97800 High 2026-10-13 Not applicable No public exploit Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
CVE-2026-97799 High 2026-10-13 Not applicable No public exploit Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97798 High 2026-10-13 Not applicable Proof of concept only Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-97794 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97793 High 2026-10-13 Not applicable Proof of concept only Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
CVE-2026-97792 High 2026-10-13 Not applicable No public exploit Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97789 High 2026-10-13 Not applicable No public exploit Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-97788 High 2026-10-13 Not applicable No public exploit Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
CVE-2026-97787 High 2026-10-13 Not applicable No public exploit Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97783 High 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-97781 High 2026-10-13 Not applicable No public exploit Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
CVE-2026-97780 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97778 High 2026-10-13 Not applicable No public exploit Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97777 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97776 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97775 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97774 High 2026-10-13 Not applicable No public exploit Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-97773 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97772 High 2026-10-13 Not applicable No public exploit Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97771 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97770 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97769 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97768 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97767 High 2026-10-13 Not applicable No public exploit Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97766 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97765 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97763 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97762 High 2026-10-13 Not applicable No public exploit Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97761 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97759 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97758 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97757 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97756 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97755 High 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97754 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97753 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97752 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97751 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97750 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97748 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97747 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97746 High 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97745 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97742 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97741 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97739 High 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97738 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97017 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97012 High 2026-10-13 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-97011 High 2026-10-13 Not applicable No public exploit Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97010 High 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97009 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-97008 High 2026-10-13 Not applicable No public exploit Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
‹ prev page 1 of 120 next ›