HIGH Severity CVEs

Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.

Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code ove

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service ove

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker

Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a secur

Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacke

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code o

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose infor

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut

Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.

Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate priv

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code o

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel al

Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges

Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locall

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to

Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacke

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Widgetiz

Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based

Arbitrary File Write vulnerabilities exist in the web-based management interface of both the AOS-10 GW and AOS-8 Control

Insufficient state checks lead to a vector that allows to bypass 2FA checks.

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflo

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read o

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a stack-based memory buffer overflo

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read o

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to read o

Cursor is a code editor built for programming with AI. In versions 0.45.0 through 0.48.6, the Cursor app introduced a re

Umbraco is a free and open source .NET content management system. Authenticated users to the Umbraco backoffice are able

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write

A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write