Actively exploited vulnerabilities (CISA KEV)

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no a…

Windows Shell Spoofing Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS …

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Desktop Window Manager Elevation of Privilege Vulnerability

MSHTML Framework Security Feature Bypass Vulnerability

Windows Shell Security Feature Bypass Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.…

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a cra…

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Windows Kernel Elevation of Privilege Vulnerability

Host Process for Windows Tasks Elevation of Privilege Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.…

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11

Windows Agere Modem Driver Elevation of Privilege Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This…

Indexed via Android Security Bulletin; full NVD metadata pending.

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.…

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If…

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox…

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to int…

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected install…

Windows SMB Client Elevation of Privilege Vulnerability

Internet Shortcut Files Remote Code Execution Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Scripting Engine Memory Corruption Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

Windows NTFS Remote Code Execution Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability