Results
21,774 of 57,547· Page 49/436Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker to
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature lo
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an aut
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.
Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a netwo
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a netwo
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information loc
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attac
TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a worksp
CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati
ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-servi
is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass.
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unau
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to in
Incorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allo
Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may all
Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information d
Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a deni
ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with a
CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that
Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting partic
A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the
Test your stack for 2026issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.