Lucene search
+L

23139 matches found

Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•22 views

Chromium: CVE-2026-8521 Use after free in Tab Groups

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

7.5CVSS5.8AI score0.00157EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•15 views

Chromium: CVE-2026-8520 Race in Payments

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.3CVSS5.8AI score0.00166EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•17 views

Microsoft Entra ID Elevation of Privilege Vulnerability

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network...

10CVSS5.8AI score0.00301EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•24 views

Microsoft Copilot Tampering Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network...

9.3CVSS5.8AI score0.0042EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•19 views

Azure Resource Manager Elevation of Privilege Vulnerability

Improper authentication in Azure Resource Manager ARM allows an unauthorized attacker to elevate privileges over a network...

10CVSS5.8AI score0.00494EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•18 views

Azure Orbital Spatio Remote Code Execution Vulnerability

Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network...

10CVSS6AI score0.00534EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•23 views

Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability

Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network...

7.5CVSS5.8AI score0.00551EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•17 views

Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS5.8AI score0.00473EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•18 views

Microsoft Planetary Computer Pro Information Disclosure Vulnerability

Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose information over a network...

10CVSS5.8AI score0.00922EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•15 views

Microsoft SharePoint Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS6AI score0.06918EPSS
SaveExploits4
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•13 views

Azure Stack HCI Information Disclosure Vulnerability

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

7.7CVSS5.8AI score0.00579EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•22 views

M365 Copilot Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.00503EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•15 views

Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability

Authorization bypass through user-controlled key in Azure Privileged Identity Management PIM allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.00426EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•17 views

Azure Virtual Network Gateway Remote Code Execution Vulnerability

Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network...

9.9CVSS6AI score0.00525EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 2:0 p.m.•29 views

Microsoft Power Pages Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Microsoft Power Pages allows an unauthorized attacker to execute code over a network...

10CVSS6AI score0.00577EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:3 a.m.•9 views

gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection

...

3.5CVSS5.9AI score0.00206EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:3 a.m.•16 views

Unbounded name compression in certain cases causes degradation of service

...

7.5CVSS5.8AI score0.00556EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:3 a.m.•17 views

Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

...

8.7CVSS5.8AI score0.00842EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:2 a.m.•15 views

Degradation of service with unbounded NSEC3 hash calculations

...

6.9CVSS5.8AI score0.00339EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:2 a.m.•22 views

Another 'ghost domain names' attack variant

...

8.7CVSS5.8AI score0.00136EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:2 a.m.•15 views

Jostle logic bypass degrades resolution performance

...

7.5CVSS5.8AI score0.00519EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:2 a.m.•18 views

Long list of incoming EDNS options degrades performance

...

8.7CVSS5.8AI score0.00556EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:2 a.m.•17 views

Possible arbitrary code execution during DNSSEC validation

...

10CVSS5.8AI score0.01272EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:2 a.m.•16 views

Use after free and crash under special conditions in RPZ code

...

8.2CVSS5.8AI score0.00255EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:2 a.m.•21 views

Crash during DNSSEC validation of malicious content

...

8.7CVSS5.8AI score0.00779EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:2 a.m.•18 views

Possible cache poisoning via promiscuous records for the authority section

...

10CVSS5.8AI score0.00249EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:2 a.m.•14 views

Packet of death with DNSCrypt

...

8.2CVSS5.8AI score0.00337EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:2 a.m.•15 views

Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write

...

7.8CVSS5.8AI score0.00152EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:1 a.m.•12 views

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.

...

8.1CVSS5.8AI score0.01264EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:1 a.m.•13 views

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

...

8.1CVSS5.8AI score0.0055EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:1 a.m.•22 views

Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy

...

3.7CVSS5.8AI score0.00337EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:1 a.m.•14 views

Rsync < 3.4.3 Authorization Bypass via Hostname Resolution

...

6.3CVSS5.8AI score0.00282EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:1 a.m.•12 views

Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files()

...

6.9CVSS5.8AI score0.00428EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:1 a.m.•13 views

Rsync < 3.4.3 Integer Overflow Information Disclosure

...

8.1CVSS5.8AI score0.0078EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/21 8:1 a.m.•13 views

Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls

...

7.2CVSS5.8AI score0.00136EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/20 8:1 a.m.•9 views

net: qrtr: ns: Limit the maximum server registration per node

...

5.5CVSS5.4AI score0.00148EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/20 8:1 a.m.•10 views

lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()

...

5.5CVSS5.4AI score0.00149EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/19 2:0 p.m.•23 views

Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

7.8CVSS5.8AI score0.00408EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/19 2:0 p.m.•16 views

Microsoft Defender Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network...

8.1CVSS6.1AI score0.00852EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/19 2:0 p.m.•18 views

Windows BitLocker Security Feature Bypass Vulnerability

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices. We are issuing this CVE to provide mitigation guidance that can be...

6.8CVSS6AI score0.01355EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
•added 2026/05/19 2:0 p.m.•23 views

Microsoft Defender Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.09641EPSS
SaveExploits2
Microsoft CVE
Microsoft CVE
•added 2026/05/19 2:0 p.m.•12 views

Microsoft Defender Denial of Service Vulnerability

...

7.5CVSS5.8AI score0.63076EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/05/19 8:1 a.m.•22 views

GNU Binutils objdump bucomm.c display_info memory leak

...

5.5CVSS6.4AI score0.00261EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/05/18 2:0 p.m.•26 views

Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability

Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network...

10CVSS5.8AI score0.00494EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/17 8:1 a.m.•16 views

FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address

...

5.9CVSS5.8AI score0.00457EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/17 8:1 a.m.•12 views

Pallets Click contains a command injection via Unsanitized Filename "click.edit()"

...

7.2CVSS5.8AI score0.009EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/05/17 8:1 a.m.•12 views

LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects

...

6.5CVSS5.8AI score0.00266EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/17 8:1 a.m.•15 views

etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks

...

6.5CVSS5.8AI score0.00225EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/17 8:1 a.m.•15 views

Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag

...

7CVSS5.8AI score0.00552EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/16 8:5 a.m.•28 views

ptrace: slightly saner 'get_dumpable()' logic

...

7.8CVSS5.8AI score0.01501EPSS
SaveExploits6
Total number of security vulnerabilities23139