Vulnerability index

Browse CVEs

228 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Access ControlCWE-284 × clear
Windows 10 1809 HIGH 8.4
CVE-2025-26678

Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a security feature locally.

Fix: 10.0.17763.7136 / 10.0.19044.5737+
Fix from $1,950 2025-04-08
Windows 10 1507 MEDIUM 6.5
CVE-2025-21197

Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't hav…

Fix: 10.0.10240.20978 / 10.0.14393.7969+
Fix from $1,600 2025-04-08
Windows 10 1507 HIGH 8.8
CVE-2025-26645

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Fix: 10.0.10240.20947 / 10.0.14393.7876+
Fix from $1,950 2025-03-11
Windows 11 22h2 HIGH 7.3
CVE-2025-24994

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

Fix: 10.0.22621.5039 / 10.0.22631.5039+
Fix from $1,950 2025-03-11
Windows 11 22h2 HIGH 7.3
CVE-2025-24076

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

Fix: 10.0.22621.5039 / 10.0.22631.5039+
Fix from $1,950 2025-03-11
Power Pages CRITICAL 9.8
CVE-2025-24989 KEV

An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing th…

Patch available
Fix from $2,300 2025-02-19
Visual Studio Code HIGH 7.3
CVE-2025-24042

Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability

Fix: 1.97.1+
Fix from $1,950 2025-02-11
Windows 10 1507 HIGH 7.8
CVE-2025-21359

Windows Kernel Security Feature Bypass Vulnerability

Fix: 10.0.10240.20915 / 10.0.14393.7785+
Fix from $1,950 2025-02-11
Edge Chromium MEDIUM 6.5
CVE-2025-21185

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Fix: 132.0.2957.115+
Fix from $1,600 2025-01-17
Visual Studio 2022 HIGH 7.3
CVE-2025-21405

Visual Studio Elevation of Privilege Vulnerability

Fix: 17.12.4+
Fix from $1,950 2025-01-14
Windows 10 1809 MEDIUM 5.5
CVE-2025-21340

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

Fix: 10.0.17763.6775 / 10.0.19044.5371+
Fix from $1,600 2025-01-14
Windows 10 1507 MEDIUM 6.5
CVE-2025-21301

Windows Geolocation Service Information Disclosure Vulnerability

Fix: 10.0.10240.20890 / 10.0.14393.7699+
Fix from $1,600 2025-01-14
Windows 10 1507 HIGH 8.8
CVE-2025-21293EPSS 19%

Active Directory Domain Services Elevation of Privilege Vulnerability

Fix: 10.0.10240.20890 / 10.0.14393.7699+
Fix from $1,950 2025-01-14
Windows 10 1507 MEDIUM 6.1
CVE-2025-21202

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

Fix: 10.0.10240.20890 / 10.0.14393.7699+
Fix from $1,600 2025-01-14
Azure Marketplace MEDIUM 6.5
CVE-2025-21380

Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network.

No fix yet
Fix from $1,600 2025-01-09
Remote Desktop Client HIGH 8.4
CVE-2024-49105

Remote Desktop Client Remote Code Execution Vulnerability

Fix: 1.2.5716.0 / 2.0.327.0+
Fix from $1,950 2024-12-12
Windows 10 1507 HIGH 7.3
CVE-2024-49107

WmsRepair Service Elevation of Privilege Vulnerability

Fix: 10.0.10240.20857 / 10.0.14393.7606+
Fix from $1,950 2024-12-12
Sharepoint Server HIGH 8.2
CVE-2024-49068

Microsoft SharePoint Elevation of Privilege Vulnerability

Mitigation only
Fix from $1,950 2024-12-12
Office HIGH 7.8
CVE-2024-43600

Microsoft Office Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2024-12-12
System Center 2019 HIGH 7.3
CVE-2024-43594

Microsoft System Center Elevation of Privilege Vulnerability

Fix: 10.19.10050.0 / 10.22.10118.0+
Fix from $1,950 2024-12-12
Remote Ssh HIGH 7.1
CVE-2024-49049

Visual Studio Code Remote Extension Elevation of Privilege Vulnerability

Fix: 0.115.1+
Fix from $1,950 2024-11-12
Visual Studio 2022 MEDIUM 6.7
CVE-2024-49044

Visual Studio Elevation of Privilege Vulnerability

Fix: 17.6.21 / 17.8.16+
Fix from $1,600 2024-11-12
Windows 10 21h2 HIGH 7.8
CVE-2024-43530

Windows Update Stack Elevation of Privilege Vulnerability

Fix: 10.0.19044.5131 / 10.0.19045.5131+
Fix from $1,950 2024-11-12
Azure Functions MEDIUM 6.5
CVE-2024-38204

Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network.

Patch available
Fix from $1,600 2024-10-15
Visual C\+\+ Redistributable HIGH 7.8
CVE-2024-43590

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

Fix: 14.40.33816 / 15.9.67+
Fix from $1,950 2024-10-08
Sharepoint Server HIGH 7.8
CVE-2024-43503

Microsoft SharePoint Elevation of Privilege Vulnerability

Patch available
Fix from $1,950 2024-10-08
Windows Server 2008 HIGH 7.4
CVE-2024-43456

Windows Remote Desktop Services Tampering Vulnerability

Fix: 10.0.14393.7428 / 10.0.17763.6414+
Fix from $1,950 2024-10-08
365 Apps HIGH 7.8
CVE-2024-38016

Microsoft Office Visio Remote Code Execution Vulnerability

Patch available
Fix from $1,950 2024-09-19
Autoupdate HIGH 7.8
CVE-2024-43492

Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

Fix: 4.72+
Fix from $1,950 2024-09-10
Power Automate HIGH 8.5
CVE-2024-43479

Microsoft Power Automate Desktop Remote Code Execution Vulnerability

Fix: 2.41.178.24249 / 2.42.331.24249+
Fix from $1,950 2024-09-10