Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2998 matches found

ATTACKERKB
ATTACKERKB•added 2026/05/12 4:59 p.m.•12 views

CVE-2026-42830

Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

6.5CVSS5.8AI score0.00474EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB•added 2026/05/12 4:59 p.m.•7 views

CVE-2026-42823

Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...

9.9CVSS5.8AI score0.00601EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB•added 2026/05/12 4:59 p.m.•14 views

CVE-2026-40403

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally...

8.8CVSS6.1AI score0.00427EPSS
SaveExploits0References2Affected Software20
ATTACKERKB
ATTACKERKB•added 2026/05/12 4:59 p.m.•37 views

CVE-2026-40398

Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.02419EPSS
SaveExploits0References2Affected Software20
ATTACKERKB
ATTACKERKB•added 2026/05/12 4:59 p.m.•12 views

CVE-2026-40382

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00249EPSS
SaveExploits0References2Affected Software20
ATTACKERKB
ATTACKERKB•added 2026/05/12 4:59 p.m.•20 views

CVE-2026-40370

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network...

8.8CVSS6AI score0.00555EPSS
SaveExploits0References2Affected Software10
ATTACKERKB
ATTACKERKB•added 2026/05/12 4:59 p.m.•9 views

CVE-2026-40365

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS6AI score0.00961EPSS
SaveExploits0References2Affected Software3
ATTACKERKB
ATTACKERKB•added 2026/05/12 4:59 p.m.•15 views

CVE-2026-42896

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00284EPSS
SaveExploits0References2Affected Software5
ATTACKERKB
ATTACKERKB•added 2026/05/12 4:58 p.m.•11 views

CVE-2026-40419

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00305EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB•added 2026/05/12 4:58 p.m.•8 views

CVE-2026-40410

Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00243EPSS
SaveExploits0References2Affected Software18
ATTACKERKB
ATTACKERKB•added 2026/05/12 4:58 p.m.•8 views

CVE-2026-40380

Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack...

6.2CVSS6.1AI score0.00462EPSS
SaveExploits0References2Affected Software20
ATTACKERKB
ATTACKERKB•added 2026/05/12 4:58 p.m.•10 views

CVE-2026-40399

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00328EPSS
SaveExploits0References2Affected Software16
ATTACKERKB
ATTACKERKB•added 2026/05/12 4:58 p.m.•20 views

CVE-2026-40368

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8CVSS6AI score0.01977EPSS
SaveExploits0References2Affected Software3
Microsoft CVE
Microsoft CVE•added 2026/05/12 2:00 p.m.•19 views

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00226EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE•added 2026/05/12 2:00 p.m.•16 views

Azure Monitor Agent Elevation of Privilege Vulnerability

External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00285EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE•added 2026/05/12 2:00 p.m.•21 views

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

9.1CVSS6.2AI score0.00748EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE•added 2026/05/12 2:00 p.m.•17 views

Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.00427EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE•added 2026/05/12 2:00 p.m.•18 views

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.0032EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE•added 2026/05/12 2:00 p.m.•13 views

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00345EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE•added 2026/05/12 2:00 p.m.•34 views

Windows Projected File System Elevation of Privilege Vulnerability

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00207EPSS
SaveExploits0
Rows per page
Query Builder