WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor microsoft✕
Overview 17,835 matches · 0 in Waratek scope · 0 protected · 720 exploited · 404 CISA KEV · 1,849 public PoC · 692 EPSS ≥ 0.5
17,835matches 0in Waratek scope0.0% 0protected0.0% 720exploited4.0% 404CISA KEV2.3% 1,849public PoC10.4% 692EPSS ≥ 0.53.9%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 17,835 100.0% Withdrawn CVE 0 0.0%
Critical 682 3.8% High 11,906 66.8% Medium 4,979 27.9% Low 268 1.5% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 17,835 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 720 4.0% Working exploit published 1,341 7.5% Proof of concept only 247 1.4% Forecast only 131 0.7% No public exploit 15,396 86.3%
split by peak 4,336 / year
Not applicable: 17,835 Low: 268Medium: 4,979High: 11,906Critical: 682 not blocked: 17,835 No public exploit: 15,396Forecast only: 131Proof of concept only: 247Working exploit published: 1,341Exploited: 720
19951 Not applicable1 Medium1 not blocked1 Working exploit published1 19961 Not applicable1 High1 not blocked1 Working exploit published1 199741 Not applicable41 Critical1 High15 Medium22 Low3 not blocked41 Working exploit published8 Forecast only1 No public exploit32 199825 Not applicable25 High11 Medium11 Low3 not blocked25 Working exploit published5 No public exploit20 1999172 Not applicable172 High70 Medium85 Low17 not blocked172 Exploited1 Working exploit published56 No public exploit115 2000143 Not applicable143 Critical1 High44 Medium75 Low23 not blocked143 Exploited2 Working exploit published51 No public exploit90 2001172 Not applicable172 High63 Medium85 Low24 not blocked172 Exploited6 Working exploit published46 Forecast only1 No public exploit119 2002241 Not applicable241 Critical1 High126 Medium103 Low11 not blocked241 Exploited3 Working exploit published54 Forecast only7 No public exploit177 2003100 Not applicable100 High55 Medium44 Low1 not blocked100 Exploited4 Working exploit published41 No public exploit55 2004143 Not applicable143 Critical1 High70 Medium60 Low12 not blocked143 Exploited16 Working exploit published42 No public exploit85 2005163 Not applicable163 High77 Medium72 Low14 not blocked163 Exploited8 Working exploit published48 Forecast only3 No public exploit104 2006266 Not applicable266 High133 Medium110 Low23 not blocked266 Exploited26 Working exploit published97 Forecast only3 No public exploit140 2007257 Not applicable257 High158 Medium94 Low5 not blocked257 Exploited11 Working exploit published70 Forecast only4 No public exploit172 2008233 Not applicable233 Critical3 High165 Medium61 Low4 not blocked233 Exploited15 Working exploit published61 Proof of concept only1 Forecast only5 No public exploit151 2009235 Not applicable235 Critical3 High173 Medium56 Low3 not blocked235 Exploited31 Working exploit published32 Forecast only2 No public exploit170 2010315 Not applicable315 High238 Medium74 Low3 not blocked315 Exploited19 Working exploit published75 Forecast only6 No public exploit215 2011253 Not applicable253 Critical3 High198 Medium49 Low3 not blocked253 Exploited15 Working exploit published25 Proof of concept only1 Forecast only2 No public exploit210 2012171 Not applicable171 Critical2 High120 Medium47 Low2 not blocked171 Exploited13 Working exploit published10 Forecast only8 No public exploit140 2013342 Not applicable342 Critical1 High253 Medium85 Low3 not blocked342 Exploited20 Working exploit published37 Forecast only8 No public exploit277 2014373 Not applicable373 Critical1 High298 Medium73 Low1 not blocked373 Exploited25 Working exploit published69 Forecast only1 No public exploit278 2015562 Not applicable562 Critical3 High387 Medium138 Low34 not blocked562 Exploited26 Working exploit published85 Proof of concept only1 Forecast only5 No public exploit445 2016490 Not applicable490 Critical8 High359 Medium104 Low19 not blocked490 Exploited37 Working exploit published76 Forecast only7 No public exploit370 2017699 Not applicable699 Critical13 High396 Medium280 Low10 not blocked699 Exploited41 Working exploit published153 Proof of concept only2 Forecast only3 No public exploit500 2018721 Not applicable721 Critical12 High439 Medium259 Low11 not blocked721 Exploited42 Working exploit published91 Proof of concept only4 Forecast only3 No public exploit581 2019848 Not applicable848 Critical32 High486 Medium328 Low2 not blocked848 Exploited46 Working exploit published56 Proof of concept only15 Forecast only11 No public exploit720 20201,272 Not applicable1,272 Critical38 High909 Medium324 Low1 not blocked1,272 Exploited46 Working exploit published5 Proof of concept only19 Forecast only5 No public exploit1,197 2021922 Not applicable922 Critical57 High646 Medium216 Low3 not blocked922 Exploited66 Working exploit published4 Proof of concept only20 Forecast only11 No public exploit821 2022948 Not applicable948 Critical28 High651 Medium264 Low5 not blocked948 Exploited36 Working exploit published2 Proof of concept only38 Forecast only10 No public exploit862 20231,022 Not applicable1,022 Critical52 High694 Medium267 Low9 not blocked1,022 Exploited40 Working exploit published14 Proof of concept only38 Forecast only16 No public exploit914 20241,121 Not applicable1,121 Critical65 High790 Medium263 Low3 not blocked1,121 Exploited48 Working exploit published4 Proof of concept only47 Forecast only7 No public exploit1,015 20251,247 Not applicable1,247 Critical64 High859 Medium317 Low7 not blocked1,247 Exploited41 Working exploit published17 Proof of concept only23 Forecast only2 No public exploit1,164 20264,336 Not applicable4,336 Critical293 High3,022 Medium1,012 Low9 not blocked4,336 Exploited36 Working exploit published5 Proof of concept only38 No public exploit4,257
19961999200220052008201120142017202020232026
17,835 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 179 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-124194 Medium 2026-11-10 Not applicable Exploited Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-69446 Medium 2026-10-30 Not applicable No public exploit Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
CVE-2026-96203 High 2026-10-29 Not applicable No public exploit Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-96199 High 2026-10-29 Not applicable No public exploit Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-96198 High 2026-10-29 Not applicable No public exploit Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-96196 High 2026-10-29 Not applicable No public exploit Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-96192 High 2026-10-29 Not applicable No public exploit Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.
CVE-2026-96187 High 2026-10-29 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVE-2026-88090 Medium 2026-10-29 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-88078 Medium 2026-10-29 Not applicable No public exploit Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-88077 High 2026-10-29 Not applicable No public exploit Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-85899 High 2026-10-29 Not applicable No public exploit Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.
CVE-2026-85897 High 2026-10-29 Not applicable No public exploit Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-85890 High 2026-10-29 Not applicable No public exploit Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-85330 Medium 2026-10-29 Not applicable No public exploit Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-20942 Medium 2026-10-29 Not applicable No public exploit Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-85898 High 2026-10-27 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-83831 High 2026-10-27 Not applicable No public exploit Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-62765 High 2026-10-27 Not applicable No public exploit Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-108455 Medium 2026-10-15 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108454 Medium 2026-10-15 Not applicable No public exploit Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108453 Medium 2026-10-15 Not applicable No public exploit Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108452 High 2026-10-15 Not applicable No public exploit Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-108451 High 2026-10-15 Not applicable No public exploit Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108450 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108449 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108448 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-108447 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108446 High 2026-10-15 Not applicable No public exploit Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-108445 High 2026-10-15 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108444 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-108443 High 2026-10-15 Not applicable No public exploit Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108442 High 2026-10-15 Not applicable No public exploit Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108441 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108440 High 2026-10-15 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108439 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108438 Medium 2026-10-15 Not applicable No public exploit Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108437 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108436 Medium 2026-10-15 Not applicable No public exploit Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108435 Medium 2026-10-15 Not applicable No public exploit Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108434 Medium 2026-10-15 Not applicable No public exploit Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108433 High 2026-10-15 Not applicable No public exploit Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-108432 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108431 High 2026-10-15 Not applicable No public exploit Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108430 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108429 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108428 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108427 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108426 High 2026-10-15 Not applicable No public exploit Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88164 High 2026-10-14 Not applicable No public exploit Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-97844 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97843 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97842 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97841 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97840 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97839 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97838 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97837 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97836 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97835 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97834 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97833 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97832 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97831 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97830 High 2026-10-13 Not applicable No public exploit Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
CVE-2026-97829 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97828 Medium 2026-10-13 Not applicable No public exploit Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97827 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97826 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97825 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97824 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97823 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97822 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97821 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97820 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97819 Medium 2026-10-13 Not applicable No public exploit Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97817 Medium 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97816 Critical 2026-10-13 Not applicable No public exploit Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-97815 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-97814 Critical 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-97813 Medium 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.
CVE-2026-97812 High 2026-10-13 Not applicable No public exploit Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97811 High 2026-10-13 Not applicable No public exploit Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-97810 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97809 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97808 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97807 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97806 High 2026-10-13 Not applicable No public exploit Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97805 Critical 2026-10-13 Not applicable No public exploit Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-97804 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2026-97803 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-97800 High 2026-10-13 Not applicable No public exploit Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
CVE-2026-97799 High 2026-10-13 Not applicable No public exploit Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97798 High 2026-10-13 Not applicable Proof of concept only Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-97794 High 2026-10-13 Not applicable No public exploit Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97793 High 2026-10-13 Not applicable Proof of concept only Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
CVE-2026-97792 High 2026-10-13 Not applicable No public exploit Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-97790 Medium 2026-10-13 Not applicable No public exploit Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
CVE-2026-97789 High 2026-10-13 Not applicable No public exploit Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-97788 High 2026-10-13 Not applicable No public exploit Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.
‹ prev page 1 of 179 next ›