CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2026-11739.8/CRITICALEPSS 0.8%
2026-01-19

birkir prime GraphQL Batch Query Handler Denial of Service Vulnerability (CVE-2026-1173)

[Affected Scope] birkir prime versions up to and including 0.4.0.beta.0 at the /graphql endpoint

[Impact] Unauthenticated remote attackers can trigger a Denial of Service (DoS) by exhausting server resources via malicious batch queries

[Mitigation] Implement strict request size limits, disable or restrict GraphQL batching, and deploy WAF rules to block anomalous payloads

CVE-2018-86397.8/HIGHEPSS 22.4%CISA KEV
2018-12-12

Windows Win32k Kernel Memory Object Handling Privilege Escalation (CVE-2018-8639) Technical Analysis and Mitigation Guide

[Affected Scope] Broad range of Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k component

[Impact] Local attackers can execute arbitrary code in kernel mode, completely compromising the system and escalating privileges from local user to SYSTEM

[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local interactive login permissions on unpatched assets

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse