Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (378 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-59292 1 Microsoft 2 Azure, Azure Compute Gallery 2026-01-02 8.2 High
External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.
CVE-2025-59291 1 Microsoft 3 Azure, Azure Compute Gallery, Azure Container Instances 2026-01-02 8.2 High
External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.
CVE-2025-59288 2 Github, Microsoft 3 Github, Azure Playwright, Playwright 2026-01-02 5.3 Medium
Improper verification of cryptographic signature in Github: Playwright allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2025-47989 1 Microsoft 3 Arc Enabled Servers Azure Connected Machine Agent, Azure, Azure Connected Machine Agent 2026-01-02 7 High
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-64657 1 Microsoft 2 Azure App Gateway, Azure Application Gateway 2026-01-02 9.8 Critical
Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-62207 1 Microsoft 2 Azure Monitor, Azure Monitor Control Service 2026-01-02 8.6 High
Azure Monitor Elevation of Privilege Vulnerability
CVE-2025-49752 1 Microsoft 1 Azure Bastion Developer 2026-01-02 10 Critical
Azure Bastion Elevation of Privilege Vulnerability
CVE-2025-59504 1 Microsoft 2 Azure Monitor, Azure Monitor Agent 2026-01-02 7.3 High
Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.
CVE-2025-64656 1 Microsoft 2 Azure App Gateway, Azure Application Gateway 2026-01-02 9.4 Critical
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-55244 1 Microsoft 3 Azure, Azure Ai Bot Service, Azure Bot Service 2025-12-23 9 Critical
Azure Bot Service Elevation of Privilege Vulnerability
CVE-2025-54914 1 Microsoft 2 Azure, Azure Networking 2025-12-23 10 Critical
Azure Networking Elevation of Privilege Vulnerability
CVE-2025-49692 1 Microsoft 2 Azure, Azure Connected Machine Agent 2025-12-23 7.8 High
Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-55316 1 Microsoft 2 Azure, Azure Connected Machine Agent 2025-12-23 7.8 High
External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally.
CVE-2024-37325 1 Microsoft 2 Azure Data Science Virtual Machine, Azure Data Science Virtual Machines 2025-12-17 8.1 High
Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability
CVE-2024-35254 1 Microsoft 1 Azure Monitor Agent 2025-12-17 7.1 High
Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2024-35253 1 Microsoft 1 Azure File Sync 2025-12-17 4.4 Medium
Microsoft Azure File Sync Elevation of Privilege Vulnerability
CVE-2024-35252 1 Microsoft 2 Azure Storage Data Movement Library, Azure Storage Movement Client Library For .net 2025-12-17 7.5 High
Azure Storage Movement Client Library Denial of Service Vulnerability
CVE-2024-35255 2 Microsoft, Redhat 12 Authentication Library, Azure Identity Library For .net, Azure Identity Library For C Plus Plus and 9 more 2025-12-17 5.5 Medium
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
CVE-2025-21188 1 Microsoft 2 Azure Network Watcher, Azure Network Watcher Agent 2025-12-17 6 Medium
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
CVE-2025-26627 1 Microsoft 1 Azure Arc 2025-12-17 7 High
Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.