CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 높음7.8 |
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. |
| 12/05/2026 |
| CVE-2026-32185 | 보통5.5 | Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally. | 12/05/2026 |
| CVE-2026-32177 | 높음7.3 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | 12/05/2026 |
| CVE-2026-32175 | 보통4.3 | A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files | 12/05/2026 |
| CVE-2026-32952 | 높음7.5 | go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue. | 24/04/2026 |
| CVE-2026-41134 | 높음7.8 | Kiota is an OpenAPI based HTTP Client code generator. Versions prior to 1.29.1 and 1.31.1 are affected by a code-generation literal injection vulnerability in multiple writer sinks (for example: serialization/deserialization keys, path/query parameter mappings, URL template metadata, enum/property metadata, and default | 22/04/2026 |
| CVE-2026-40372 | 심각9.1 | Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. | 21/04/2026 |
| CVE-2026-33825KEV | 높음7.8 | Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally. | 14/04/2026 |
| CVE-2026-33822 | 보통6.1 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 14/04/2026 |
| CVE-2026-33120 | 높음8.8 | Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network. | 14/04/2026 |
| CVE-2026-33116 | 높음7.5 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network. | 14/04/2026 |
| CVE-2026-33115 | 높음8.4 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/04/2026 |
| CVE-2026-33114 | 높음8.4 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/04/2026 |
| CVE-2026-33103 | 보통5.5 | Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally. | 14/04/2026 |
| CVE-2026-33095 | 높음7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/04/2026 |
| CVE-2026-32226 | 보통5.9 | Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network. | 14/04/2026 |
| CVE-2026-32203 | 높음7.5 | Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network. | 14/04/2026 |