CVE Database
Synced from NVD, cross-referenced against CISA KEV and EPSS · ordered by last update
| CVE ID | Score | Description |
|---|---|---|
| 8d ago | 6.7 | Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. |
| 8d ago | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
| 8d ago | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
| 8d ago | 6.7 | Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. |
| 8d ago | 6.5 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. |
| 8d ago | 6.5 | Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. |
| 8d ago | 5.5 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| 8d ago | 5.3 | Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network. |
| 8d ago | 6.5 | Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network. |
| 8d ago | 5.5 | Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally. |
| 8d ago | 4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| 8d ago | 5.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| 8d ago | 4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| 8d ago | 4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| 8d ago | 5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| 8d ago | 4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| 8d ago | 5.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| 8d ago | 5.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| 8d ago | 5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| 8d ago | 5.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| 8d ago | 5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| 8d ago | 5.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| 8d ago | 5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
| 8d ago | 6.5 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| 8d ago | 6.5 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. |
| 8d ago | 4.6 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| 8d ago | 6.5 | Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network. |
| 8d ago | 6.5 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network. |
| 8d ago | 6.5 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. |
| 8d ago | 5.9 | Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network. |