CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 高危7.8 |
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. |
| 12/05/2026 |
| CVE-2026-32185 | 中危5.5 | Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally. | 12/05/2026 |
| CVE-2026-32177 | 高危7.3 | Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. | 12/05/2026 |
| CVE-2026-32175 | 中危4.3 | A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files | 12/05/2026 |
| CVE-2026-32952 | 高危7.5 | go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue. | 24/04/2026 |
| CVE-2026-41134 | 高危7.8 | Kiota is an OpenAPI based HTTP Client code generator. Versions prior to 1.29.1 and 1.31.1 are affected by a code-generation literal injection vulnerability in multiple writer sinks (for example: serialization/deserialization keys, path/query parameter mappings, URL template metadata, enum/property metadata, and default | 22/04/2026 |
| CVE-2026-40372 | 严重9.1 | Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. | 21/04/2026 |
| CVE-2026-33825KEV | 高危7.8 | Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally. | 14/04/2026 |
| CVE-2026-33822 | 中危6.1 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 14/04/2026 |
| CVE-2026-33120 | 高危8.8 | Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network. | 14/04/2026 |
| CVE-2026-33116 | 高危7.5 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network. | 14/04/2026 |
| CVE-2026-33115 | 高危8.4 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/04/2026 |
| CVE-2026-33114 | 高危8.4 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/04/2026 |
| CVE-2026-33103 | 中危5.5 | Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally. | 14/04/2026 |
| CVE-2026-33095 | 高危7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/04/2026 |
| CVE-2026-32226 | 中危5.9 | Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network. | 14/04/2026 |
| CVE-2026-32203 | 高危7.5 | Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network. | 14/04/2026 |