Syntax: kev:true severity:critical epss:>0.95 vendor:cisco patch:false
Filters
Severity
Exploitation
Data Source
Data Quality
Vendor
CWE — Weakness Type
Clear all
Top 20 matches Showing top matches — use filters or a more specific query to narrow
CVE-2025-47966
CRITICAL CVSS 9.8
Find Similar
Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network.
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network.
CVE-2026-20805
MEDIUM CVSS 5.5 KEV
Find Similar
Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.
Exposure of sensitive information to an unauthorized actor in Windows Power Dependency Coordinator allows an authorized attacker to disclose information locally.
CVE-2025-53795
CRITICAL CVSS 9.8
Find Similar
Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network.
CVE-2026-21533
HIGH CVSS 7.8 KEV
Find Similar
Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack vector.
Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Windows Management Services allows an authorized attacker to disclose information locally.
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally.
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.
Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Windows Failover Cluster allows an authorized attacker to disclose information locally.
Page 1+ Next →