CVE Database and Vulnerability Search

Browse vendorsBrowse ecosystems

Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.

Vulnerabilities
381,276
with PoCs
37,250
CISA KEV
1,665
Ransomware
606
with Nuclei
4,342
Advanced

Showing 25 vulnerabilities on this page

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Secure Boot Security Feature Bypass Vulnerability

Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CWE-1329May 12, 2026
CVSS6.7v3.1EPSS1.42%PoCs0SignalsSTIX

Windows TCP/IP Denial of Service Vulnerability

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network.

CWE-476May 12, 2026
CVSS7.4v3.1EPSS0.401%PoCs0SignalsSTIX

Windows Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

CWE-122May 12, 2026
CVSS8.8v3.1EPSS0.427%PoCs0SignalsSTIX

Windows TCP/IP Denial of Service Vulnerability

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.

CWE-476May 12, 2026
CVSS7.1v3.1EPSS0.331%PoCs0SignalsSTIX

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

CWE-122May 12, 2026
CVSS7.8v3.1EPSS2.42%PoCs0SignalsSTIX

Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability

Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.

CWE-284May 12, 2026
CVSS4.4v3.1EPSS0.204%PoCs0SignalsSTIX

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CWE-191May 12, 2026
CVSS7.8v3.1EPSS0.273%PoCs0SignalsSTIX

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CWE-416May 12, 2026
CVSS7.8v3.1EPSS0.249%PoCs0SignalsSTIX

Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability

Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.

CWE-415May 12, 2026
CVSS7.0v3.1EPSS0.199%PoCs0SignalsSTIX

Windows Projected File System Elevation of Privilege Vulnerability

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CWE-416May 12, 2026
CVSS7.0v3.1EPSS0.207%PoCs0SignalsSTIX

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally.

CWE-476May 12, 2026
CVSS5.5v3.1EPSS0.292%PoCs0SignalsSTIX

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CWE-416May 12, 2026
CVSS7.8v3.1EPSS0.249%PoCs0SignalsSTIX

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CWE-362CWE-416May 12, 2026
CVSS7.8v3.1EPSS0.163%PoCs0SignalsSTIX

Windows DWM Core Library Elevation of Privilege Vulnerability

Buffer over-read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

CWE-122CWE-126May 12, 2026
CVSS7.8v3.1EPSS0.245%PoCs0SignalsSTIX

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CWE-362May 12, 2026
CVSS7.8v3.1EPSS0.154%PoCs0SignalsSTIX

Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability

Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CWE-415May 12, 2026
CVSS7.8v3.1EPSS0.398%PoCs0SignalsSTIX

Windows TCP/IP Local Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CWE-122May 12, 2026
CVSS7.8v3.1EPSS1.84%PoCs0SignalsSTIX

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CWE-416May 12, 2026
CVSS7.8v3.1EPSS2.12%PoCs0SignalsSTIX

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CWE-416May 12, 2026
CVSS7.0v3.1EPSS0.226%PoCs0SignalsSTIX

Windows Rich Text Edit Elevation of Privilege Vulnerability

Double free in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

CWE-415May 12, 2026
CVSS6.7v3.1EPSS0.319%PoCs0SignalsSTIX

Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.

CWE-362CWE-416May 12, 2026
CVSS7.5v3.1EPSS0.297%PoCs0SignalsSTIX

Windows DNS Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.

CWE-122May 12, 2026
CVSS9.8v3.1EPSS1.93%PoCs5SignalsSTIX

Data Deduplication Elevation of Privilege Vulnerability

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

CWE-416May 12, 2026
CVSS7.8v3.1EPSS0.332%PoCs0SignalsSTIX

Windows Netlogon Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

CWE-121May 12, 2026
CVSS9.8v3.1EPSS79.6%PoCs7SignalsSTIX

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CWE-73May 12, 2026
CVSS7.8v3.1EPSS0.319%PoCs0SignalsSTIX