CVE Database
Synced from NVD, cross-referenced against CISA KEV and EPSS · ordered by last update
| CVE ID | Score | Description |
|---|---|---|
| 4h ago | 8.1 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
| 4h ago | 6.7 | No cwe for this issue in Windows DNS allows an authorized attacker to elevate privileges locally. |
| 4h ago | 6.5 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. |
| 4h ago | 9.8 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
| 4h ago | 7.8 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
| 4h ago | 8.1 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
| 4h ago | 7 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| 4h ago | 7.8 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| 4h ago | 7.8 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| 4h ago | 6.5 | Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. |
| 4h ago | 5.5 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| 4h ago | 7 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| 4h ago | 7 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| 4h ago | 7 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| 4h ago | 7 | Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| 4h ago | 7 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| 4h ago | 7 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| 4h ago | 5.3 | Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network. |
| 4h ago | 7 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| 4h ago | 7.8 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| 4h ago | 7.8 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| 4h ago | 7.8 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| 4h ago | 6.5 | Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network. |
| 4h ago | 8.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network. |
| 4h ago | 8.8 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network. |
| 4h ago | 7.5 | Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network. |
| 4h ago | 8.1 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
| 4h ago | 7 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| 4h ago | 7.1 | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network. |
| 4h ago | 7.8 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges locally. |