Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-26631

Description: Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.3)

EPSS Score: 0.12%

Source: CVE
March 11th, 2025 (3 months ago)

CVE-2025-26630

Description: Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVSS: HIGH (7.8)

EPSS Score: 0.08%

Source: CVE
March 11th, 2025 (3 months ago)

CVE-2025-26629

Description: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS: HIGH (7.8)

EPSS Score: 0.08%

Source: CVE
March 11th, 2025 (3 months ago)

CVE-2025-26627

Description: Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.0)

EPSS Score: 0.04%

Source: CVE
March 11th, 2025 (3 months ago)

CVE-2025-25008

Description: Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.1)

EPSS Score: 0.06%

Source: CVE
March 11th, 2025 (3 months ago)

CVE-2025-25003

Description: Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.3)

EPSS Score: 0.12%

Source: CVE
March 11th, 2025 (3 months ago)

CVE-2025-24998

Description: Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.3)

EPSS Score: 0.12%

Source: CVE
March 11th, 2025 (3 months ago)

CVE-2025-24997

Description: Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally.

CVSS: MEDIUM (4.4)

EPSS Score: 0.06%

Source: CVE
March 11th, 2025 (3 months ago)

CVE-2025-24996

Description: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVSS: MEDIUM (6.5)

EPSS Score: 0.12%

Source: CVE
March 11th, 2025 (3 months ago)

CVE-2025-24995

Description: Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

CVSS: HIGH (7.8)

EPSS Score: 0.05%

Source: CVE
March 11th, 2025 (3 months ago)