Applied on every visit. A link with its own settings always wins, so shared links still show what the sender saw.
Audio briefing
Motion
The ring colour and pattern carry the meaning; the sweep is decoration, so turning it off loses nothing. Already off automatically if your system asks for reduced motion.
Glass
Clear and frosted apply to the glass themes (Liquid, Aether and the iPhone finishes), and the background sits behind them. Story text always stays on frosted glass so it is easy to read. Glass is off automatically if your system asks for reduced transparency.
Saved
Security — Advisories
Vulnerabilities
2,132 advisories, graded by how exploitable they are and what an attacker gets — not by CVSS alone. Confirmed exploitation always outranks a theoretical score.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 17 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 17 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 17 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 17 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 17 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 17 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Edge (Chromium-based)
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 17 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Raw Image Extension
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct HEVC Video Extensions
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows PDF
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Visual Studio Code
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Visual Studio Code
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Visual Studio Code
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Visio
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Visio
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Visio
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Microsoft Office SharePoint
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Visual Studio Code
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Access
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Message Queuing
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows libarchive
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows TCP/IP
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows libarchive
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows iSCSI
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows iSCSI
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows iSCSI
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows iSCSI
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft PowerShell
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Error Reporting
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Error Reporting
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft OpenSSH for Windows
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows CCFFilter Driver
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows Partition Management Driver
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows GDI
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows CD-ROM File System Driver
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft XML
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Local Security Authority Subsystem Service (LSASS)
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows GDI
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Imaging Component
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft PowerShell
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft OpenSSH for Windows
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Background Intelligent Transfer Service (BITS)
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Background Intelligent Transfer Service (BITS)
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows OLE DB
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows CD-ROM Driver
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Shell
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Failover Cluster
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Internet Information Services
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows iSCSI
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows Client-Side Caching (CSC) Service
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct ASP.NET Core
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Word
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Local Security Authority Subsystem Service (LSASS)
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Raw Image Extension
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Media Player
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows libarchive
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows System Information Console
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Imaging Component
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Image Acquisition
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Error Reporting
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Search Component
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Text Shaping
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Internet Messaging API
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows SMB Client
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Event Logging Service
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Event Tracing
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft OpenSSH for Windows
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows GDI+
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft XML
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Server for NFS
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Background Intelligent Transfer Service (BITS)
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Background Intelligent Transfer Service (BITS)
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Deployment Services
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Windows Kernel
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Active Directory Domain Services
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Exchange Server
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft SQL Server
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office Outlook
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft MPEG-2 Video Extension
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct ASP.NET Core
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows BitLocker
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows OLE
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows DHCP Server
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Raw Image Extension
Listed in CISA's Known Exploited Vulnerabilities catalog — attackers are already using it. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Security BypassVector NetworkAuth None requiredProduct Windows Shell
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Windows Media Foundation
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Media
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft QUIC
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Media Video Decoder
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Text Shaping
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Text Shaping
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct .NET and Visual Studio
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Schannel
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Privilege EscalationVector NetworkAuth None requiredProduct Microsoft Windows Search Component
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Domain Name Service
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Text Shaping
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Windows Error Reporting
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft OpenSSH for Windows
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft QUIC
Reachable over the network with no credentials, and leads to code execution. Downgraded from critical after 20 business days — still a real risk, no longer breaking news.
Impact Remote Code ExecutionVector NetworkAuth None requiredProduct Microsoft Office OneNote
