Vulnerability index

Browse CVEs

54 matching

Cards Compact

Filters 2 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Filtering by weakness Improper AuthorizationCWE-285 × clear

Azure Automation HIGH 8.8

Improper authorization in Azure Automation allows an authorized attacker to elevate privileges over a network.

Mitigation only

Fix from $1,950 2025-05-08

Azure Ai Bot Service CRITICAL 9.8

Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.

Mitigation only

Fix from $2,300 2025-04-30

Azure Ai Bot Service CRITICAL 9.8

Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.

Mitigation only

Fix from $2,300 2025-04-30

Azure Machine Learning HIGH 8.8

Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.

Fix from $1,950 2025-04-30

Sharepoint Enterprise Server HIGH 8.8

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.18526.20172+

Fix from $1,950 2025-04-08

Azure Playwright CRITICAL 9.8

Improper authorization in Azure Playwright allows an unauthorized attacker to elevate privileges over a network.

Mitigation only

Fix from $2,300 2025-03-31

Dataverse HIGH 7.2

Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.

Mitigation only

Fix from $1,950 2025-03-13

Sharepoint Server HIGH 8.0

CVE-2025-21400EPSS 34%

Microsoft SharePoint Server Remote Code Execution Vulnerability

Fix: 16.0.17928.20396+

Fix from $1,950 2025-02-11

Sharepoint Server HIGH 7.2

Microsoft SharePoint Server Remote Code Execution Vulnerability

Fix: 16.0.17928.20356+

Fix from $1,950 2025-01-14

Windows 10 21h2 HIGH 7.8

Windows App Package Installer Elevation of Privilege Vulnerability

Fix: 10.0.19044.5371 / 10.0.19045.5371+

Fix from $1,950 2025-01-14

Azure Cyclecloud CRITICAL 9.9

Azure CycleCloud Remote Code Execution Vulnerability

Fix from $2,300 2024-11-12

Windows Server 2022 23h2 MEDIUM 6.6

Windows Kerberos Elevation of Privilege Vulnerability

Fix: 10.0.25398.1189+

Fix from $1,600 2024-10-08

Dynamics 365 Business Central HIGH 8.8

Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over …

Patch available

Fix from $1,950 2024-09-17

Outlook MEDIUM 6.5

Microsoft Outlook for iOS Information Disclosure Vulnerability

Fix from $1,600 2024-09-10

Windows Server 2008 HIGH 7.5

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Fix: 10.0.14393.7336 / 10.0.17763.6293+

Fix from $1,950 2024-09-10

Dynamics 365 HIGH 7.3

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Patch available

Fix from $1,950 2024-07-09

Azure Migrate MEDIUM 6.4

Azure Migrate Remote Code Execution Vulnerability

Fix: 6.1.294.1003+

Fix from $1,600 2024-04-09

365 Apps HIGH 7.1

Microsoft Outlook Elevation of Privilege Vulnerability

Fix: after 2401.17231.20236

Fix from $1,950 2024-02-13

Sharepoint Server MEDIUM 6.5

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Patch available

Fix from $1,600 2023-06-14

Windows Server 2012 HIGH 7.6

Windows Server Service Security Feature Bypass Vulnerability

Patch available

Fix from $1,950 2023-06-14

Visual Studio Code MEDIUM 6.6

Visual Studio Code Spoofing Vulnerability

Fix from $1,600 2023-05-09

Windows 10 1607 HIGH 8.8

Windows SMB Witness Service Elevation of Privilege Vulnerability

Mitigation only

Fix from $1,950 2023-01-10

Onefuzz CRITICAL 10.0

OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allow…

Fix from $2,300 2021-08-13

Windows 10 HIGH 8.8

CVE-2016-3352EPSS 21%

Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which makes it eas…

Mitigation only

Fix from $1,950 2016-09-14