Lucene search
+L

24507 matches found

Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•32 views

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00249EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•19 views

SQL Server Remote Code Execution Vulnerability

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network...

8.8CVSS6AI score0.00555EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•16 views

Microsoft Word Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Office Word allows an unauthorized attacker to execute code locally...

8.4CVSS6AI score0.00453EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•16 views

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS6AI score0.00332EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•27 views

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally...

5.5CVSS5.8AI score0.00292EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•28 views

Windows Kernel-Mode Driver Remote Code Execution Vulnerability

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network...

8CVSS6AI score0.00511EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•17 views

Windows TCP/IP Local Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.01838EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•18 views

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS6AI score0.03097EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•74 views

M365 Copilot for Desktop Spoofing Vulnerability

Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally...

6.2CVSS5.8AI score0.00363EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•22 views

Microsoft Word for Android Spoofing Vulnerability

Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally...

7.1CVSS5.8AI score0.00292EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•13 views

Data Deduplication Elevation of Privilege Vulnerability

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00332EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•27 views

Windows TCP/IP Remote Code Execution Vulnerability

Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

8.1CVSS6AI score0.00789EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•14 views

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00328EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•25 views

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00304EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•19 views

Microsoft Power Automate Desktop Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00868EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•19 views

Microsoft Word Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Office Word allows an unauthorized attacker to execute code locally...

8.4CVSS6AI score0.00383EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•24 views

Microsoft Word Information Disclosure Vulnerability

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00448EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•18 views

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS6AI score0.00961EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•29 views

Microsoft Outlook and Word Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

8.4CVSS6.2AI score0.00605EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•18 views

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS6AI score0.01698EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•23 views

Windows DWM Core Library Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00245EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•29 views

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.02117EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•16 views

Windows DWM Core Library Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00284EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•22 views

Visual Studio Code Security Feature Bypass Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

6.3CVSS5.8AI score0.00599EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•18 views

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00305EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•12 views

Windows TCP/IP Information Disclosure Vulnerability

Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.00931EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•20 views

Microsoft Word Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Office Word allows an unauthorized attacker to execute code locally...

8.4CVSS6AI score0.04421EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•16 views

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

External control of file name or path in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

7.4CVSS5.8AI score0.00652EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•16 views

Chromium: CVE-2026-7905 Insufficient validation of untrusted input in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.3CVSS5.8AI score0.0022EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•18 views

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS5.8AI score0.00285EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•20 views

Chromium: CVE-2026-7915 Insufficient data validation in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS5.8AI score0.00243EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•20 views

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

4.3CVSS5.5AI score0.00497EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•13 views

Chromium: CVE-2026-7913 Insufficient policy enforcement in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

7.8CVSS5.8AI score0.00112EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•25 views

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Improper neutralization of special elements in output used by a downstream component 'injection' in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...

5.4CVSS5.8AI score0.0024EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•14 views

Chromium: CVE-2026-7993 Insufficient validation of untrusted input in Payments

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.2CVSS5.8AI score0.00186EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•14 views

Chromium: CVE-2026-7931 Insufficient validation of untrusted input in iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

5.4CVSS5.8AI score0.0019EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•15 views

Chromium: CVE-2026-7897 Use after free in Mobile

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

7.5CVSS5.8AI score0.00308EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•14 views

Chromium: CVE-2026-7912 Integer overflow in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.2CVSS5.8AI score0.00153EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•15 views

Chromium: CVE-2026-7941 Insufficient validation of untrusted input in Mobile

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.4CVSS5.8AI score0.00112EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•9 views

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

4.3CVSS5.8AI score0.00349EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 2:00 p.m.•13 views

Chromium: CVE-2026-8020 Uninitialized Use in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

5.3CVSS5.8AI score0.00207EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/11 8:03 a.m.•10 views

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

...

7.5CVSS5.8AI score0.00443EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/05/10 8:03 a.m.•15 views

pgx: SQL Injection via placeholder confusion with dollar quoted string literals

...

9.8CVSS5.8AI score0.00356EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/10 8:03 a.m.•25 views

Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

...

8.7CVSS5.8AI score0.00517EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/10 8:02 a.m.•16 views

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

...

7.5CVSS5.8AI score0.00781EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/10 8:01 a.m.•15 views

Vim: OS Command Injection via 'path' completion

...

5.3CVSS5.8AI score0.00917EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/10 8:01 a.m.•14 views

Vim: Heap Buffer Overflow in spell file loading

...

6.6CVSS5.8AI score0.00248EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/05/10 8:01 a.m.•15 views

PgBouncer crash in kill_pool_logins_server_error

...

7.5CVSS5.8AI score0.00369EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2026/05/10 8:01 a.m.•19 views

PgBouncer missing authorization check in KILL_CLIENT admin command

...

4.3CVSS5.8AI score0.00287EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/10 8:01 a.m.•17 views

PgBouncer buffer overflow in SCRAM

...

9.8CVSS5.8AI score0.00372EPSS
SaveExploits0
Total number of security vulnerabilities24507