Vulnerability index

Browse CVEs

611 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Input ValidationCWE-20 × clear
Azure Stack Hci HIGH 7.7
CVE-2026-26147

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.

Mitigation only
Fix from $1,950 2026-05-22
Edge Chromium CRITICAL 9.8
CVE-2026-45495

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Fix: 148.0.3967.70+
Fix from $2,300 2026-05-18
Edge Chromium MEDIUM 5.4
CVE-2026-45492

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

Fix: 148.0.3967.70+
Fix from $1,600 2026-05-18
.net Framework HIGH 7.3
CVE-2026-35433

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

Fix: 8.0.27 / 9.0.16+
Fix from $1,950 2026-05-12
Visual Studio 2022 HIGH 7.3
CVE-2026-32177

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

Fix: 8.0.27 / 9.0.16+
Fix from $1,950 2026-05-12
Azure Managed Instance For Apache Cassandra CRITICAL 9.0
CVE-2026-33844

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.

Mitigation only
Fix from $2,300 2026-05-07
Windows Server 2012 HIGH 8.0
CVE-2026-33826

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $1,950 2026-04-14
.net HIGH 7.5
CVE-2026-33116

Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a …

Fix: 8.0.26 / 9.0.15+
Fix from $1,950 2026-04-14
.net HIGH 7.5
CVE-2026-32203

Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.

Fix: 8.0.26 / 9.0.15+
Fix from $1,950 2026-04-14
Sharepoint Server MEDIUM 6.5
CVE-2026-32201 KEVEPSS 23%

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Fix: 16.0.19725.20210+
Fix from $1,600 2026-04-14
Azure Monitor Agent HIGH 7.8
CVE-2026-32168

Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Fix: 1.35.9+
Fix from $1,950 2026-04-14
Windows 10 1607 HIGH 7.3
CVE-2026-32149

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $1,950 2026-04-14
Windows Server 2016 HIGH 8.7
CVE-2026-27928

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $1,950 2026-04-14
Windows Server 2012 HIGH 7.7
CVE-2026-27913

Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $1,950 2026-04-14
Windows 10 1607 HIGH 7.8
CVE-2026-26170

Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $1,950 2026-04-14
Windows 10 1809 HIGH 7.8
CVE-2026-26161

Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.8644 / 10.0.19044.7184+
Fix from $1,950 2026-04-14
Windows 10 1607 HIGH 7.8
CVE-2026-26156

Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $1,950 2026-04-14
Windows Server 2012 HIGH 7.5
CVE-2026-26154

Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $1,950 2026-04-14
Powershell HIGH 7.8
CVE-2026-26143

Improper input validation in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

Fix: 7.4.14 / 7.5.5+
Fix from $1,950 2026-04-14
Azure Iot Explorer HIGH 7.5
CVE-2026-26121

Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.

Fix: 0.15.14+
Fix from $1,950 2026-03-10
Sharepoint Server HIGH 8.8
CVE-2026-26106

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20076+
Fix from $1,950 2026-03-10
System Center Operations Manager HIGH 8.8
CVE-2026-20967

Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.

Mitigation only
Fix from $1,950 2026-03-10
365 Apps MEDIUM 5.5
CVE-2026-21258

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Fix: 16.0.10417.20097+
Fix from $1,600 2026-02-10
Windows 10 1607 HIGH 7.3
CVE-2026-21247

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

Fix: 10.0.14393.8868 / 10.0.17763.8389+
Fix from $1,950 2026-02-10
Power Bi Report Server HIGH 8.8
CVE-2026-21229

Improper input validation in Power BI allows an authorized attacker to execute code over a network.

Fix: 15.0.1120.113+
Fix from $1,950 2026-02-10
Sharepoint Server HIGH 7.8
CVE-2026-20951

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

Fix: 16.0.19127.20442+
Fix from $1,950 2026-01-13
Windows 10 1607 HIGH 8.1
CVE-2026-20856

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Fix: 10.0.14393.8783 / 10.0.17763.8276+
Fix from $1,950 2026-01-13
Windows 10 1607 MEDIUM 6.5
CVE-2026-20812

Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.

Fix: 10.0.14393.8783 / 10.0.17763.8276+
Fix from $1,600 2026-01-13
Exchange Server HIGH 7.5
CVE-2025-64666

Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Fix: 15.02.2562.035+
Fix from $1,950 2025-12-09
Windows 10 1607 HIGH 7.8
CVE-2025-62571

Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.8688 / 10.0.17763.8146+
Fix from $1,950 2025-12-09