Overview 269 matches · 0 in Waratek scope · 0 protected · 3 exploited · 0 CISA KEV · 57 public PoC · 10 EPSS ≥ 0.5
269matches
0in Waratek scope0.0%
0protected0.0%
3exploited1.1%
0CISA KEV0.0%
57public PoC21.2%
10EPSS ≥ 0.53.7%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
0.4%
Not applicable
268
99.6%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
269
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 35 / year
19973
Not applicable3
Low3
not blocked3
Forecast only1
No public exploit2
19983
Not applicable3
Low3
not blocked3
Working exploit published1
No public exploit2
199917
Not applicable17
Low17
not blocked17
Working exploit published7
No public exploit10
200023
Not applicable23
Low23
not blocked23
Working exploit published7
No public exploit16
200124
Not applicable24
Low24
not blocked24
Working exploit published7
No public exploit17
200211
Not applicable11
Low11
not blocked11
Working exploit published2
Forecast only1
No public exploit8
20031
Not applicable1
Low1
not blocked1
No public exploit1
200412
Not applicable12
Low12
not blocked12
Working exploit published2
No public exploit10
200514
Not applicable14
Low14
not blocked14
Exploited1
Working exploit published2
No public exploit11
200623
Not applicable23
Low23
not blocked23
Exploited1
Working exploit published12
No public exploit10
20075
Not applicable5
Low5
not blocked5
No public exploit5
20084
Not applicable4
Low4
not blocked4
No public exploit4
20093
Not applicable3
Low3
not blocked3
Exploited1
No public exploit2
20103
Not applicable3
Low3
not blocked3
No public exploit3
20113
Not applicable3
Low3
not blocked3
No public exploit3
20122
Not applicable2
Low2
not blocked2
No public exploit2
20133
Not applicable3
Low3
not blocked3
No public exploit3
20141
Not applicable1
Low1
not blocked1
No public exploit1
201535
Outside Waratek scope1
Not applicable34
Low35
not blocked35
Working exploit published9
Proof of concept only1
No public exploit25
201619
Not applicable19
Low19
not blocked19
Working exploit published2
Forecast only1
No public exploit16
201710
Not applicable10
Low10
not blocked10
No public exploit10
201811
Not applicable11
Low11
not blocked11
Working exploit published3
No public exploit8
20192
Not applicable2
Low2
not blocked2
No public exploit2
20201
Not applicable1
Low1
not blocked1
No public exploit1
20213
Not applicable3
Low3
not blocked3
No public exploit3
20225
Not applicable5
Low5
not blocked5
No public exploit5
20239
Not applicable9
Low9
not blocked9
Proof of concept only2
No public exploit7
20243
Not applicable3
Low3
not blocked3
No public exploit3
20257
Not applicable7
Low7
not blocked7
No public exploit7
20269
Not applicable9
Low9
not blocked9
Proof of concept only1
No public exploit8
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-69904 | Low | 2026-09-08 | Not applicable | No public exploit | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| CVE-2026-50419 | Low | 2026-07-14 | Not applicable | No public exploit | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-50416 | Low | 2026-07-14 | Not applicable | Proof of concept only | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-45642 | Low | 2026-06-09 | Not applicable | No public exploit | Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack. |
| CVE-2026-45485 | Low | 2026-06-09 | Not applicable | No public exploit | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| CVE-2026-45466 | Low | 2026-06-09 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-45459 | Low | 2026-06-09 | Not applicable | No public exploit | Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-0102 | Low | 2026-02-17 | Not applicable | No public exploit | Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata. |
| CVE-2026-21249 | Low | 2026-02-10 | Not applicable | No public exploit | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally. |
| CVE-2025-65046 | Low | 2025-12-18 | Not applicable | No public exploit | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2025-59280 | Low | 2025-10-14 | Not applicable | No public exploit | Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network. |
| CVE-2025-49760 | Low | 2025-07-08 | Not applicable | No public exploit | External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network. |
| CVE-2025-49756 | Low | 2025-07-08 | Not applicable | No public exploit | Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally. |
| CVE-2025-49731 | Low | 2025-07-08 | Not applicable | No public exploit | Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network. |
| CVE-2025-21337 | Low | 2025-02-11 | Not applicable | No public exploit | Windows NTFS Elevation of Privilege Vulnerability |
| CVE-2025-21312 | Low | 2025-01-14 | Not applicable | No public exploit | Windows Smart Card Reader Information Disclosure Vulnerability |
| CVE-2024-26246 | Low | 2024-03-14 | Not applicable | No public exploit | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
| CVE-2024-21383 | Low | 2024-01-26 | Not applicable | No public exploit | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2024-21336 | Low | 2024-01-26 | Not applicable | No public exploit | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2023-38158 | Low | 2023-08-21 | Not applicable | No public exploit | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
| CVE-2022-29147 | Low | 2023-06-29 | Not applicable | Proof of concept only | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2023-32024 | Low | 2023-06-14 | Not applicable | No public exploit | Microsoft Power Apps Spoofing Vulnerability |
| CVE-2023-28303 | Low | 2023-06-13 | Not applicable | Proof of concept only | Windows Snipping Tool Information Disclosure Vulnerability |
| CVE-2022-35798 | Low | 2023-05-18 | Not applicable | No public exploit | Azure Arc Jumpstart Information Disclosure Vulnerability |
| CVE-2023-29333 | Low | 2023-05-09 | Not applicable | No public exploit | Microsoft Access Denial of Service Vulnerability |
| CVE-2023-28301 | Low | 2023-04-11 | Not applicable | No public exploit | Microsoft Edge (Chromium-based) Tampering Vulnerability |
| CVE-2023-23395 | Low | 2023-03-14 | Not applicable | No public exploit | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2023-21759 | Low | 2023-01-10 | Not applicable | No public exploit | Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability |
| CVE-2022-41043 | Low | 2022-10-11 | Not applicable | No public exploit | Microsoft Office Information Disclosure Vulnerability |
| CVE-2022-38022 | Low | 2022-10-11 | Not applicable | No public exploit | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2022-23292 | Low | 2022-04-15 | Not applicable | No public exploit | Microsoft Power BI Spoofing Vulnerability |
| CVE-2022-21977 | Low | 2022-03-09 | Not applicable | No public exploit | Media Foundation Information Disclosure Vulnerability |
| CVE-2022-21929 | Low | 2022-01-11 | Not applicable | No public exploit | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2021-42323 | Low | 2021-11-10 | Not applicable | No public exploit | Azure RTOS Information Disclosure Vulnerability |
| CVE-2020-24588 | Low | 2021-05-11 | Not applicable | No public exploit | The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets. |
| CVE-2020-24003 | Low | 2021-01-11 | Not applicable | No public exploit | Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access. |
| CVE-2020-0884 | Low | 2020-03-12 | Not applicable | No public exploit | A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'. |
| CVE-2019-1488 | Low | 2019-12-10 | Not applicable | No public exploit | A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Microsoft Defender Security Feature Bypass Vulnerability'. |
| CVE-2019-1418 | Low | 2019-11-12 | Not applicable | No public exploit | An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'. |
| CVE-2018-8482 | Low | 2018-10-10 | Not applicable | No public exploit | An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8481. |
| CVE-2018-8481 | Low | 2018-10-10 | Not applicable | No public exploit | An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8482. |
| CVE-2018-8449 | Low | 2018-09-13 | Not applicable | Working exploit published | A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. |
| CVE-2018-8366 | Low | 2018-09-13 | Not applicable | No public exploit | An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. |
| CVE-2018-8370 | Low | 2018-08-15 | Not applicable | No public exploit | A information disclosure vulnerability exists when WebAudio Library improperly handles audio requests, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. |
| CVE-2018-0966 | Low | 2018-04-12 | Not applicable | Working exploit published | A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. |
| CVE-2018-0942 | Low | 2018-03-14 | Not applicable | No public exploit | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow elevation of privilege, due to how Internet Explorer handles zone and integrity settings, aka "Internet Explorer Elevation of Privilege Vulnerability". |
| CVE-2018-0919 | Low | 2018-03-14 | Not applicable | No public exploit | Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2010 SP2, Word 2013 SP1 and Microsoft Word 2016 allow an information disclosure vulnerability due to how variables are initialized, aka "Microsoft Office Information Disclosure Vulnerability". |
| CVE-2018-0878 | Low | 2018-03-14 | Not applicable | Working exploit published | Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to how XML External Entities (XXE) are processed, aka "Windows Remote Assistance Information Disclosure Vulnerability". |
| CVE-2018-0853 | Low | 2018-02-15 | Not applicable | No public exploit | Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information disclosure vulnerability, due to how Office initializes the affected variable, aka "Microsoft Office Information Disclosure Vulnerability". |
| CVE-2018-0763 | Low | 2018-02-15 | Not applicable | No public exploit | Microsoft Edge in Microsoft Windows 10 1703 and 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0839. |
| CVE-2017-11874 | Low | 2017-11-15 | Not applicable | No public exploit | Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run arbitrary code on a target system, due to how Microsoft Edge handles accessing memory in code compiled by the Edge Just-In-Time (JIT) compiler, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-11863 and CVE-2017-11872. |
| CVE-2017-11850 | Low | 2017-11-15 | Not applicable | No public exploit | Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to log on to an affected system and run a specially crafted application due to improper handling of objects in memory, aka "Microsoft Graphics Component Information Disclosure Vulnerability". |
| CVE-2017-11833 | Low | 2017-11-15 | Not applicable | No public exploit | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the origin of all webpages in the affected browser, due to how Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11803 and CVE-2017-11844. |
| CVE-2017-11791 | Low | 2017-11-15 | Not applicable | No public exploit | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-11834. |
| CVE-2017-11768 | Low | 2017-11-15 | Not applicable | No public exploit | Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows remote attackers to test for the presence of files on disk via a specially crafted application. due to the way Windows Media Player discloses file information, aka "Windows Media Player Information Disclosure Vulnerability." |
| CVE-2017-8676 | Low | 2017-09-13 | Not applicable | No public exploit | The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an authenticated attacker to retrieve information from a targeted system via a specially crafted application, aka "Windows GDI+ Information Disclosure Vulnerability." |
| CVE-2017-0188 | Low | 2017-04-12 | Not applicable | No public exploit | A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure Vulnerability." This CVE ID is unique from CVE-2017-0189. |
| CVE-2017-0159 | Low | 2017-04-12 | Not applicable | No public exploit | A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability." |
| CVE-2017-0096 | Low | 2017-03-17 | Not applicable | No public exploit | Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability." |
| CVE-2017-0042 | Low | 2017-03-17 | Not applicable | No public exploit | Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows Vista SP2; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "Windows Media Player Information Disclosure Vulnerability." |
| CVE-2016-7239 | Low | 2016-11-10 | Not applicable | No public exploit | The RegEx class in the XSS filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability." |
| CVE-2016-7227 | Low | 2016-11-10 | Not applicable | No public exploit | The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of local files via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability." |
| CVE-2016-7220 | Low | 2016-11-10 | Not applicable | No public exploit | Virtual Secure Mode in Microsoft Windows 10 allows local users to obtain sensitive information via a crafted application, aka "Virtual Secure Mode Information Disclosure Vulnerability." |
| CVE-2016-7214 | Low | 2016-11-10 | Not applicable | No public exploit | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to bypass the ASLR protection mechanism via a crafted application, aka "Win32k Information Disclosure Vulnerability." |
| CVE-2016-7204 | Low | 2016-11-10 | Not applicable | No public exploit | Microsoft Edge allows remote attackers to access arbitrary "My Documents" files via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." |
| CVE-2016-7199 | Low | 2016-11-10 | Not applicable | No public exploit | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the Same Origin Policy and obtain sensitive window-state information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability." |
| CVE-2016-3354 | Low | 2016-09-14 | Not applicable | No public exploit | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "GDI Information Disclosure Vulnerability." |
| CVE-2016-3344 | Low | 2016-09-14 | Not applicable | No public exploit | The Secure Kernel Mode feature in Microsoft Windows 10 Gold and 1511 allows local users to obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability." |
| CVE-2016-3325 | Low | 2016-09-14 | Not applicable | Working exploit published | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability." |
| CVE-2016-3291 | Low | 2016-09-14 | Not applicable | No public exploit | Microsoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability." |
| CVE-2016-0137 | Low | 2016-09-14 | Not applicable | No public exploit | The Click-to-Run (C2R) implementation in Microsoft Office 2013 SP1 and 2016 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft APP-V ASLR Bypass." |
| CVE-2016-3321 | Low | 2016-08-09 | Not applicable | No public exploit | Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Internet Explorer Information Disclosure Vulnerability." |
| CVE-2016-3276 | Low | 2016-07-13 | Not applicable | No public exploit | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability." |
| CVE-2016-3274 | Low | 2016-07-13 | Not applicable | No public exploit | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability." |
| CVE-2016-3272 | Low | 2016-07-13 | Not applicable | No public exploit | The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles page-fault system calls, which allows local users to obtain sensitive information from an arbitrary process via a crafted application, aka "Windows Kernel Information Disclosure Vulnerability." |
| CVE-2016-3251 | Low | 2016-07-13 | Not applicable | Forecast only | The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to obtain sensitive kernel-address information via a crafted application, aka "Win32k Information Disclosure Vulnerability." |
| CVE-2016-0175 | Low | 2016-05-11 | Not applicable | No public exploit | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to obtain sensitive information about kernel-object addresses, and consequently bypass the KASLR protection mechanism, via a crafted application, aka "Win32k Information Disclosure Vulnerability." |
| CVE-2016-4534 | Low | 2016-05-05 | Not applicable | Working exploit published | The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on Windows allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles. |
| CVE-2016-0125 | Low | 2016-03-09 | Not applicable | No public exploit | Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via a crafted HTTPS web site, aka "Microsoft Edge Information Disclosure Vulnerability." |
| CVE-2015-6113 | Low | 2015-11-11 | Not applicable | No public exploit | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to bypass intended filesystem permissions by leveraging Low Integrity access, aka "Windows Kernel Security Feature Bypass Vulnerability." |
| CVE-2015-6109 | Low | 2015-11-11 | Not applicable | No public exploit | The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the KASLR protection mechanism, and consequently discover a driver base address, via a crafted application, aka "Windows Kernel Memory Information Disclosure Vulnerability." |
| CVE-2015-6102 | Low | 2015-11-11 | Not applicable | Working exploit published | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to bypass the KASLR protection mechanism, and consequently discover a driver base address, via a crafted application, aka "Windows Kernel Memory Information Disclosure Vulnerability." |
| CVE-2015-6039 | Low | 2015-10-14 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content in an Office Marketplace instance, aka "Microsoft SharePoint Security Feature Bypass Vulnerability." |
| CVE-2015-6037 | Low | 2015-10-14 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1, and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka "Microsoft Office Web Apps XSS Spoofing Vulnerability." |
| CVE-2015-2534 | Low | 2015-09-09 | Not applicable | No public exploit | Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 improperly processes ACL settings, which allows local users to bypass intended network-traffic restrictions via a crafted application, aka "Hyper-V Security Feature Bypass Vulnerability." |
| CVE-2015-2529 | Low | 2015-09-09 | Not applicable | No public exploit | The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Kernel ASLR Bypass Vulnerability." |
| CVE-2015-2522 | Low | 2015-09-09 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content, aka "Microsoft SharePoint XSS Spoofing Vulnerability." |
| CVE-2015-2476 | Low | 2015-08-15 | Not applicable | No public exploit | The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "WebDAV Client Information Disclosure Vulnerability." |
| CVE-2015-2465 | Low | 2015-08-15 | Not applicable | No public exploit | The Windows shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows Shell Security Feature Bypass Vulnerability." |
| CVE-2015-2454 | Low | 2015-08-15 | Not applicable | No public exploit | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows KMD Security Feature Bypass Vulnerability." |
| CVE-2015-2433 | Low | 2015-08-15 | Not applicable | Working exploit published | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Kernel ASLR Bypass Vulnerability." |
| CVE-2015-2428 | Low | 2015-08-15 | Not applicable | No public exploit | Object Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly constrain impersonation levels during interaction with object symbolic links that originated in a sandboxed process, which allows local users to gain privileges via a crafted application, aka "Windows Object Manager Elevation of Privilege Vulnerability." |
| CVE-2015-2382 | Low | 2015-07-14 | Not applicable | No public exploit | win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Win32k Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2381. |
| CVE-2015-2381 | Low | 2015-07-14 | Not applicable | No public exploit | win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Win32k Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2382. |
| CVE-2015-2374 | Low | 2015-07-14 | Not applicable | No public exploit | The Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly implement domain-controller communication, which allows remote attackers to discover credentials by leveraging certain PDC access and spoofing the BDC role in a PDC communication channel, aka "Elevation of Privilege Vulnerability in Netlogon." |
| CVE-2015-2367 | Low | 2015-07-14 | Not applicable | No public exploit | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from uninitialized kernel memory via a crafted application, aka "Win32k Information Disclosure Vulnerability." |
| CVE-2015-1719 | Low | 2015-06-10 | Not applicable | No public exploit | The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to obtain sensitive information from kernel memory via a crafted application, aka "Microsoft Windows Kernel Information Disclosure Vulnerability." |
| CVE-2015-4000 | Low | 2015-05-21 | Outside Waratek scope | Proof of concept only | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue. |
| CVE-2015-1681 | Low | 2015-05-13 | Not applicable | No public exploit | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to cause a denial of service via a crafted .msc file, aka "Microsoft Management Console File Format Denial of Service Vulnerability." |
| CVE-2015-1680 | Low | 2015-05-13 | Not applicable | Working exploit published | The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to bypass the ASLR protection mechanism via a crafted function call, aka "Microsoft Windows Kernel Memory Disclosure Vulnerability," a different vulnerability than CVE-2015-1676, CVE-2015-1677, CVE-2015-1678, and CVE-2015-1679. |