Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally....
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network....
Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally....
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally....
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally....
Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally....
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally....
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally....
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally....
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vu...
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally....
Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enabling stored cross-site scripting (XSS). When a malicious u...
Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approval using a client-suppli...
Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network....
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally....
Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network....
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally....
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network....
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally....
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally....
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally....
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally....