WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor microsoft✕
Overview 4,988 matches · 3 in Waratek scope · 0 protected · 104 exploited · 34 CISA KEV · 557 public PoC · 88 EPSS ≥ 0.5
4,988matches 3in Waratek scope0.1% 0protected0.0% 104exploited2.1% 34CISA KEV0.7% 557public PoC11.2% 88EPSS ≥ 0.51.8%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 0.1% Outside Waratek scope 6 0.1% Not applicable 4,979 99.8% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 4,988 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 4,988 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 104 2.1% Working exploit published 483 9.7% Proof of concept only 76 1.5% Forecast only 25 0.5% No public exploit 4,300 86.2%
split by peak 1,012 / year
Not applicable: 4,979Outside Waratek scope: 6No exploit published: 3 Medium: 4,988 not blocked: 4,988 No public exploit: 4,300Forecast only: 25Proof of concept only: 76Working exploit published: 483Exploited: 104
19951 Not applicable1 Medium1 not blocked1 Working exploit published1 19960 199722 Not applicable22 Medium22 not blocked22 Working exploit published6 No public exploit16 199811 Not applicable11 Medium11 not blocked11 Working exploit published2 No public exploit9 199985 Not applicable85 Medium85 not blocked85 Working exploit published33 No public exploit52 200075 Not applicable75 Medium75 not blocked75 Exploited1 Working exploit published33 No public exploit41 200185 Not applicable85 Medium85 not blocked85 Exploited1 Working exploit published24 Forecast only1 No public exploit59 2002104 Outside Waratek scope1 Not applicable103 Medium104 not blocked104 Exploited1 Working exploit published23 Forecast only2 No public exploit78 200344 Not applicable44 Medium44 not blocked44 Working exploit published14 No public exploit30 200460 Not applicable60 Medium60 not blocked60 Exploited6 Working exploit published19 No public exploit35 200573 Outside Waratek scope1 Not applicable72 Medium73 not blocked73 Exploited2 Working exploit published23 Forecast only1 No public exploit47 2006110 Not applicable110 Medium110 not blocked110 Exploited7 Working exploit published46 No public exploit57 200795 Outside Waratek scope1 Not applicable94 Medium95 not blocked95 Exploited1 Working exploit published26 No public exploit68 200861 Not applicable61 Medium61 not blocked61 Exploited1 Working exploit published26 No public exploit34 200956 Not applicable56 Medium56 not blocked56 Exploited4 Working exploit published14 Forecast only2 No public exploit36 201074 Not applicable74 Medium74 not blocked74 Exploited2 Working exploit published15 No public exploit57 201149 Not applicable49 Medium49 not blocked49 Exploited1 Working exploit published4 Proof of concept only1 No public exploit43 201247 Not applicable47 Medium47 not blocked47 Exploited2 Working exploit published3 Forecast only5 No public exploit37 201386 Outside Waratek scope1 Not applicable85 Medium86 not blocked86 Exploited4 Working exploit published8 Forecast only2 No public exploit72 201473 Not applicable73 Medium73 not blocked73 Exploited5 Working exploit published4 Forecast only1 No public exploit63 2015138 Not applicable138 Medium138 not blocked138 Exploited5 Working exploit published11 Proof of concept only1 Forecast only2 No public exploit119 2016104 Not applicable104 Medium104 not blocked104 Exploited4 Working exploit published18 Forecast only1 No public exploit81 2017280 Not applicable280 Medium280 not blocked280 Exploited3 Working exploit published86 Proof of concept only1 No public exploit190 2018260 Outside Waratek scope1 Not applicable259 Medium260 not blocked260 Exploited13 Working exploit published23 Proof of concept only1 Forecast only1 No public exploit222 2019328 Not applicable328 Medium328 not blocked328 Exploited6 Working exploit published15 Proof of concept only4 Forecast only3 No public exploit300 2020325 Outside Waratek scope1 Not applicable324 Medium325 not blocked325 Exploited1 Proof of concept only7 No public exploit317 2021216 Not applicable216 Medium216 not blocked216 Exploited4 Proof of concept only12 Forecast only1 No public exploit199 2022265 No exploit published1 Not applicable264 Medium265 not blocked265 Exploited5 Proof of concept only18 No public exploit242 2023268 No exploit published1 Not applicable267 Medium268 not blocked268 Exploited7 Working exploit published2 Proof of concept only12 Forecast only2 No public exploit245 2024264 No exploit published1 Not applicable263 Medium264 not blocked264 Exploited5 Working exploit published1 Proof of concept only11 Forecast only1 No public exploit246 2025317 Not applicable317 Medium317 not blocked317 Exploited8 Working exploit published2 Proof of concept only4 No public exploit303 20261,012 Not applicable1,012 Medium1,012 not blocked1,012 Exploited5 Working exploit published1 Proof of concept only4 No public exploit1,002
19961999200220052008201120142017202020232026
4,988 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 50 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-124194 Medium 2026-11-10 Not applicable Exploited Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-69446 Medium 2026-10-30 Not applicable No public exploit Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
CVE-2026-88090 Medium 2026-10-29 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-88078 Medium 2026-10-29 Not applicable No public exploit Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-85330 Medium 2026-10-29 Not applicable No public exploit Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-20942 Medium 2026-10-29 Not applicable No public exploit Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-108455 Medium 2026-10-15 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108454 Medium 2026-10-15 Not applicable No public exploit Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108453 Medium 2026-10-15 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108438 Medium 2026-10-15 Not applicable No public exploit Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108436 Medium 2026-10-15 Not applicable No public exploit Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108435 Medium 2026-10-15 Not applicable No public exploit Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108434 Medium 2026-10-15 Not applicable No public exploit Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-97844 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97843 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97842 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97841 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97840 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97839 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97838 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97837 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97836 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97835 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97834 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97833 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97832 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97831 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97829 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97828 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97827 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97826 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97825 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97824 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97823 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97822 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97821 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97820 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97819 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97817 Medium 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97813 Medium 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.
CVE-2026-97790 Medium 2026-10-13 Not applicable No public exploit Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
CVE-2026-97782 Medium 2026-10-13 Not applicable No public exploit Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-97779 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97760 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97744 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-97743 Medium 2026-10-13 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97740 Medium 2026-10-13 Not applicable No public exploit Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97014 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-97005 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-96948 Medium 2026-10-13 Not applicable No public exploit Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
CVE-2026-96944 Medium 2026-10-13 Not applicable No public exploit Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
CVE-2026-96938 Medium 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96935 Medium 2026-10-13 Not applicable No public exploit Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96930 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-96927 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96926 Medium 2026-10-13 Not applicable No public exploit Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.
CVE-2026-96925 Medium 2026-10-13 Not applicable No public exploit Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-96921 Medium 2026-10-13 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.
CVE-2026-96910 Medium 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-96865 Medium 2026-10-13 Not applicable No public exploit Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
CVE-2026-96863 Medium 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-96860 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
CVE-2026-96859 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-96858 Medium 2026-10-13 Not applicable No public exploit Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
CVE-2026-96857 Medium 2026-10-13 Not applicable No public exploit Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.
CVE-2026-96855 Medium 2026-10-13 Not applicable No public exploit Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
CVE-2026-96854 Medium 2026-10-13 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-96853 Medium 2026-10-13 Not applicable No public exploit Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-96851 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-96850 Medium 2026-10-13 Not applicable No public exploit Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.
CVE-2026-96849 Medium 2026-10-13 Not applicable No public exploit Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-96848 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-96846 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
CVE-2026-96321 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.
CVE-2026-96316 Medium 2026-10-13 Not applicable No public exploit Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
CVE-2026-96315 Medium 2026-10-13 Not applicable No public exploit Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.
CVE-2026-96314 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
CVE-2026-96311 Medium 2026-10-13 Not applicable No public exploit Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
CVE-2026-96303 Medium 2026-10-13 Not applicable No public exploit Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96300 Medium 2026-10-13 Not applicable No public exploit Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.
CVE-2026-96247 Medium 2026-10-13 Not applicable No public exploit Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-96218 Medium 2026-10-13 Not applicable No public exploit Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
CVE-2026-96206 Medium 2026-10-13 Not applicable No public exploit Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.
CVE-2026-96183 Medium 2026-10-13 Not applicable No public exploit Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
CVE-2026-95904 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-94506 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.
CVE-2026-88226 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-88209 Medium 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88208 Medium 2026-10-13 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88203 Medium 2026-10-13 Not applicable No public exploit Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88201 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88195 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88192 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88190 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88184 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88183 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88175 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88172 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88169 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88167 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
‹ prev page 1 of 50 next ›