Lucene search
+L

23108 matches found

Microsoft CVE
Microsoft CVE
•added 2026/04/17 8:1 a.m.•10 views

jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow

...

8.2CVSS5.7AI score0.00484EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/04/15 8:5 a.m.•7 views

Discount has an Out-of-bounds Read in rdiscount

...

5.9CVSS5.8AI score0.00275EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/04/15 8:4 a.m.•13 views

HTTP client proxy tunnel headers not validated for CR/LF

...

5.7CVSS7.3AI score0.00562EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/15 8:1 a.m.•6 views

An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with an empty payload. This can cause desynchronization issues with the backend server and could be used for request smuggling. The earliest affected version is 2.6.

...

5.8CVSS5.8AI score0.00297EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Windows UPnP Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•9 views

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00203EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•10 views

Remote Desktop Licensing Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00256EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•7 views

Microsoft Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

6.1CVSS6.2AI score0.0036EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•18 views

Microsoft SQL Server Remote Code Execution Vulnerability

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...

8.8CVSS6.5AI score0.00706EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Windows Win32k Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0032EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

UEFI Secure Boot Security Feature Bypass Vulnerability

Improper access control in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

4.4CVSS6.2AI score0.00288EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•10 views

AMD: CVE-2023-20585 IOMMU Write Buffer Vulnerability

The vulnerability assigned to this CVE could lead to corruption of guest encrypted memory. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide...

5.6CVSS6.3AI score0.00098EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•4 views

Windows Redirected Drive Buffering System Denial of Service Vulnerability

Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally...

5.5CVSS6.2AI score0.00366EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•8 views

Windows Shell Spoofing Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

4.3CVSS6.2AI score0.63686EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•9 views

Windows Kernel Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally...

5.5CVSS6.2AI score0.0042EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Windows Snipping Tool Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows Snipping Tool allows an unauthorized attacker to execute code locally...

7.8CVSS6.4AI score0.00618EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•7 views

Windows User Interface Core Elevation of Privilege Vulnerability

Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.002EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•9 views

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7.8CVSS6.4AI score0.00201EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Windows UPnP Device Host Remote Code Execution Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...

7.4CVSS6.4AI score0.00286EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00458EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•12 views

Windows Speech Brokered Api Elevation of Privilege Vulnerability

Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00246EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•10 views

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.002EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•11 views

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00489EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•7 views

Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability

Use after free in Windows WFP NDIS Lightweight Filter Driver wfplwfs.sys allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00243EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•7 views

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00298EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Windows Shell Elevation of Privilege Vulnerability

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00252EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

5.4CVSS6.2AI score0.20783EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•9 views

Microsoft Power Apps Desktop Client Spoofing Vulnerability

Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network...

9CVSS5.3AI score0.00563EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•13 views

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network...

6.5CVSS6.2AI score0.00739EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•10 views

Windows Management Services Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

7.8CVSS6.4AI score0.00193EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

...

6.5CVSS6.2AI score0.00893EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Windows UPnP Device Host Information Disclosure Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to disclose information over an adjacent network...

6.5CVSS6.2AI score0.0036EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•9 views

Windows UPnP Device Host Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•7 views

Microsoft Management Console Elevation of Privilege Vulnerability

Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.02579EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•11 views

Windows Installer Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00206EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally...

8.8CVSS6.2AI score0.00416EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client Side Caching driver csc.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS6.5AI score0.0023EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7.8CVSS6.4AI score0.00153EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•14 views

.NET Framework Denial of Service Vulnerability

Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network...

7.5CVSS6.2AI score0.0133EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•8 views

Windows Recovery Environment Security Feature Bypass Vulnerability

Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack...

4.6CVSS6.3AI score0.0043EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Windows Active Directory Remote Code Execution Vulnerability

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network...

8CVSS6.4AI score0.00535EPSS
SaveExploits2
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Windows COM Server Information Disclosure Vulnerability

Access of resource using incompatible type 'type confusion' in Windows COM allows an authorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00341EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•20 views

GitHub: CVE-2026-32631 'git clone' from manipulated repositories can leak NTLM hashes

CVE-2026-32631 is regarding a vulnerability where it is possible to obtain a user's NTLM hash by tricking them into cloning a malicious repository, or checking out a malicious branch that accesses an attacker-controlled server. By default, NTLM authentication does not need any user interaction...

7.4CVSS6.3AI score0.00316EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•8 views

Microsoft Defender Elevation of Privilege Vulnerability

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.06749EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•11 views

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

7.8CVSS6.4AI score0.00372EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•5 views

Windows Kernel Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally...

5.5CVSS6.2AI score0.00436EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•7 views

Azure Monitor Agent Elevation of Privilege Vulnerability

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.01925EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•6 views

Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...

7CVSS6.5AI score0.00252EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•10 views

Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.01191EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:0 p.m.•12 views

Windows Shell Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Shell allows an authorized attacker to elevate privileges locally...

7.8CVSS6.4AI score0.00192EPSS
SaveExploits0
Total number of security vulnerabilities23108