Lucene search
K

21701 matches found

Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•15 views

Microsoft Word Information Disclosure Vulnerability

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00448EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•12 views

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00205EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•16 views

Windows Storport Miniport Driver Denial of Service Vulnerability

Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network...

6.5CVSS5.8AI score0.00782EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•13 views

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00261EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•13 views

Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Application Identity AppID Subsystem allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00326EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•13 views

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00298EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•12 views

Win32k Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.0019EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•14 views

Win32k Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.0019EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•10 views

Windows Rich Text Edit Elevation of Privilege Vulnerability

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally...

6.7CVSS5.8AI score0.00319EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•14 views

Microsoft Outlook and Word Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

8.4CVSS6.2AI score0.00605EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•13 views

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally...

5.5CVSS5.8AI score0.00292EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•16 views

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00154EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•16 views

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.02117EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•11 views

Azure Machine Learning Notebook Spoofing Vulnerability

Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network...

8.2CVSS5.8AI score0.00498EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•10 views

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS6AI score0.02108EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•11 views

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00226EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•16 views

Microsoft Teams Spoofing Vulnerability

Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally...

5.5CVSS5.8AI score0.00466EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•10 views

Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network...

7.5CVSS6.1AI score0.00297EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•63 views

Microsoft PowerPoint for Android Spoofing Vulnerability

Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally...

7.1CVSS5.8AI score0.00292EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•13 views

Microsoft Data Formulator Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...

8.8CVSS6AI score0.00842EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•10 views

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00319EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•11 views

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00305EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•9 views

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00272EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•7 views

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00304EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•16 views

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00304EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•12 views

Microsoft Power Automate Desktop Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00868EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•11 views

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

7.8CVSS5.8AI score0.00408EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•10 views

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

8.4CVSS6.1AI score0.00383EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•9 views

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS6AI score0.02032EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•13 views

Windows 11 Telnet Client Information Disclosure Vulnerability

Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network...

5.4CVSS5.8AI score0.00747EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•18 views

Windows GDI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally...

7.8CVSS6.1AI score0.00532EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•12 views

Windows DWM Core Library Information Disclosure Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00374EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•8 views

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00345EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•9 views

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00332EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•15 views

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00314EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•13 views

Windows Print Spooler Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.0029EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•12 views

Win32k Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00304EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•7 views

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.0031EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•6 views

Azure SDK for Java Security Feature Bypass Vulnerability

The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted encrypted input may...

9.1CVSS6AI score0.00479EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•7 views

Azure Monitor Agent Elevation of Privilege Vulnerability

External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00285EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•9 views

Microsoft Word Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Office Word allows an unauthorized attacker to execute code locally...

8.4CVSS6AI score0.00453EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•13 views

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00249EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•7 views

Windows TCP/IP Denial of Service Vulnerability

...

7.1CVSS5.8AI score0.00331EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•9 views

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS6AI score0.00961EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•12 views

SQL Server Remote Code Execution Vulnerability

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network...

8.8CVSS6AI score0.00555EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•15 views

Windows TCP/IP Denial of Service Vulnerability

...

7.4CVSS5.8AI score0.00401EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•8 views

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00273EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•12 views

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.02419EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•9 views

Windows Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally...

8.8CVSS6.1AI score0.00427EPSS
Exploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•7 views

Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability

Improper access control in Windows Filtering Platform WFP allows an authorized attacker to bypass a security feature locally...

4.4CVSS5.8AI score0.00204EPSS
Exploits0
Total number of security vulnerabilities21701