{"generated_at":"2026-10-23T15:20:58.298Z","count":16,"incidents":[{"id":"microsoft-defender-insufficient-granularity-of-access-co-cve-2026-33825","url":"https://pwned.coffee/i/microsoft-defender-insufficient-granularity-of-access-co-cve-2026-33825","title":"Microsoft Defender Insufficient Granularity of Access Control Vulnerability","summary":"Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally. Added to CISA KEV on 2026-04-22 (federal deadline 2026-05-06).","severity":"critical","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Defender","fixed_versions":[],"ids":["CVE-2026-33825"],"stack":["windows"],"first_seen":"2026-04-22T12:00:00.000Z","updated_at":"2026-04-22T12:00:00.000Z"},{"id":"microsoft-windows-link-following-vulnerability-2","url":"https://pwned.coffee/i/microsoft-windows-link-following-vulnerability-2","title":"Microsoft Windows Link Following Vulnerability","summary":"Microsoft Windows contains a link following vulnerability that allows for privilege escalation Can be chained with CVE-2023-36424. Added to CISA KEV on 2026-04-13 (federal deadline 2026-04-27).","severity":"critical","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Windows","fixed_versions":[],"ids":["CVE-2023-36424","CVE-2025-60710"],"stack":["windows"],"first_seen":"2026-04-13T12:00:00.000Z","updated_at":"2026-04-13T12:00:00.000Z"},{"id":"microsoft-windows-command-injection-vulnerability-cve-2026-96951","url":"https://pwned.coffee/i/microsoft-windows-command-injection-vulnerability-cve-2026-96951","title":"Microsoft Windows Command Injection Vulnerability","summary":"Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network. Added to CISA KEV on 2026-10-13 (federal deadline 2026-10-16).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Windows","fixed_versions":[],"ids":["CVE-2026-96951"],"stack":["windows"],"first_seen":"2026-10-13T12:00:00.000Z","updated_at":"2026-10-13T12:00:00.000Z"},{"id":"microsoft-windows-link-following-vulnerability","url":"https://pwned.coffee/i/microsoft-windows-link-following-vulnerability","title":"Microsoft Windows Link Following Vulnerability","summary":"Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM. Can be chained with CVE-2026-85880. Added to CISA KEV on 2026-09-08 (federal deadline 2026-09-22).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Windows","fixed_versions":[],"ids":["CVE-2026-81963","CVE-2026-85880"],"stack":["windows"],"first_seen":"2026-09-08T12:00:00.000Z","updated_at":"2026-09-08T12:00:00.000Z"},{"id":"microsoft-windows-ancillary-function-driver-for-winsock-cve-2026-68820","url":"https://pwned.coffee/i/microsoft-windows-ancillary-function-driver-for-winsock-cve-2026-68820","title":"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","summary":"Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. Added to CISA KEV on 2026-08-11 (federal deadline 2026-08-25).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Windows Ancillary Function Driver for WinSock","fixed_versions":[],"ids":["CVE-2026-68820"],"stack":["windows"],"first_seen":"2026-08-11T12:00:00.000Z","updated_at":"2026-08-11T12:00:00.000Z"},{"id":"microsoft-windows-buffer-overflow-vulnerability-cve-2008-4250","url":"https://pwned.coffee/i/microsoft-windows-buffer-overflow-vulnerability-cve-2008-4250","title":"Microsoft Windows Buffer Overflow Vulnerability","summary":"Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization. Added to CISA KEV on 2026-05-20 (federal deadline 2026-06-03).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Windows","fixed_versions":[],"ids":["CVE-2008-4250"],"stack":["windows"],"first_seen":"2026-05-20T12:00:00.000Z","updated_at":"2026-05-20T12:00:00.000Z"},{"id":"microsoft-defender-link-following-vulnerability","url":"https://pwned.coffee/i/microsoft-defender-link-following-vulnerability","title":"Microsoft Defender Link Following Vulnerability","summary":"Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally. Can be chained with CVE-2026-45498. Added to CISA KEV on 2026-05-20 (federal deadline 2026-06-03).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Defender","fixed_versions":[],"ids":["CVE-2026-41091","CVE-2026-45498"],"stack":["windows"],"first_seen":"2026-05-20T12:00:00.000Z","updated_at":"2026-05-20T12:00:00.000Z"},{"id":"microsoft-windows-protection-mechanism-failure-vulnerabi-cve-2026-32202","url":"https://pwned.coffee/i/microsoft-windows-protection-mechanism-failure-vulnerabi-cve-2026-32202","title":"Microsoft Windows Protection Mechanism Failure Vulnerability","summary":"Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network. Added to CISA KEV on 2026-04-28 (federal deadline 2026-05-12).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Windows","fixed_versions":[],"ids":["CVE-2026-32202"],"stack":["windows"],"first_seen":"2026-04-28T12:00:00.000Z","updated_at":"2026-04-28T12:00:00.000Z"},{"id":"microsoft-windows-video-activex-control-remote-code-exec-cve-2008-0015","url":"https://pwned.coffee/i/microsoft-windows-video-activex-control-remote-code-exec-cve-2008-0015","title":"Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","summary":"Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. Added to CISA KEV on 2026-02-17 (federal deadline 2026-03-10).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Windows","fixed_versions":[],"ids":["CVE-2008-0015"],"stack":["windows"],"first_seen":"2026-02-17T12:00:00.000Z","updated_at":"2026-02-17T12:00:00.000Z"},{"id":"microsoft-mshtml-framework-protection-mechanism-failure-vulnerability","url":"https://pwned.coffee/i/microsoft-mshtml-framework-protection-mechanism-failure-vulnerability","title":"Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability","summary":"Microsoft MSHTML Framework contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a security feature over a network. Can be chained with CVE-2026-21525, CVE-2026-21510, CVE-2026-21533, CVE-2026-21519. Added to CISA KEV on 2026-02-10 (federal deadline 2026-03-03).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Windows","fixed_versions":[],"ids":["CVE-2026-21510","CVE-2026-21513","CVE-2026-21519","CVE-2026-21525","CVE-2026-21533"],"stack":["windows"],"first_seen":"2026-02-10T12:00:00.000Z","updated_at":"2026-02-10T12:00:00.000Z"},{"id":"react-native-community-cli-os-command-injection-vulnerab-cve-2025-11953","url":"https://pwned.coffee/i/react-native-community-cli-os-command-injection-vulnerab-cve-2025-11953","title":"React Native Community CLI OS Command Injection Vulnerability","summary":"React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro Development Server and run arbitrary executables via a vulnerable endpoint exposed by the server. On Windows, attackers can also execute arbitrary shell commands with fully controlled arguments. Added to CISA KEV on 2026-02-05 (federal deadline 2026-02-26).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"React Native Community CLI","fixed_versions":[],"ids":["CVE-2025-11953"],"stack":["react","windows"],"first_seen":"2026-02-05T12:00:00.000Z","updated_at":"2026-02-05T12:00:00.000Z"},{"id":"prettier-eslint-config-prettier-embedded-malicious-code-cve-2025-54313","url":"https://pwned.coffee/i/prettier-eslint-config-prettier-embedded-malicious-code-cve-2025-54313","title":"Prettier eslint-config-prettier Embedded Malicious Code Vulnerability","summary":"Prettier eslint-config-prettier contains an embedded malicious code vulnerability. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows. Added to CISA KEV on 2026-01-22 (federal deadline 2026-02-12).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Prettier eslint-config-prettier","fixed_versions":[],"ids":["CVE-2025-54313"],"stack":["windows"],"first_seen":"2026-01-22T12:00:00.000Z","updated_at":"2026-01-22T12:00:00.000Z"},{"id":"microsoft-windows-information-disclosure-vulnerability-cve-2026-20805","url":"https://pwned.coffee/i/microsoft-windows-information-disclosure-vulnerability-cve-2026-20805","title":"Microsoft Windows Information Disclosure Vulnerability","summary":"Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally. Added to CISA KEV on 2026-01-13 (federal deadline 2026-02-03).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Windows","fixed_versions":[],"ids":["CVE-2026-20805"],"stack":["windows"],"first_seen":"2026-01-13T12:00:00.000Z","updated_at":"2026-01-13T12:00:00.000Z"},{"id":"microsoft-windows-use-after-free-vulnerability-cve-2025-62221","url":"https://pwned.coffee/i/microsoft-windows-use-after-free-vulnerability-cve-2025-62221","title":"Microsoft Windows Use After Free Vulnerability","summary":"Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulnerability that can allow an authorized attacker to elevate privileges locally. Added to CISA KEV on 2025-12-09 (federal deadline 2025-12-30).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Windows","fixed_versions":[],"ids":["CVE-2025-62221"],"stack":["windows"],"first_seen":"2025-12-09T12:00:00.000Z","updated_at":"2025-12-09T12:00:00.000Z"},{"id":"microsoft-windows-race-condition-vulnerability-cve-2025-62215","url":"https://pwned.coffee/i/microsoft-windows-race-condition-vulnerability-cve-2025-62215","title":"Microsoft Windows Race Condition Vulnerability","summary":"Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level access. Added to CISA KEV on 2025-11-12 (federal deadline 2025-12-03).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Windows","fixed_versions":[],"ids":["CVE-2025-62215"],"stack":["windows"],"first_seen":"2025-11-12T12:00:00.000Z","updated_at":"2025-11-12T12:00:00.000Z"},{"id":"microsoft-windows-server-update-service-wsus-deserializa-cve-2025-59287","url":"https://pwned.coffee/i/microsoft-windows-server-update-service-wsus-deserializa-cve-2025-59287","title":"Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability","summary":"Microsoft Windows Server Update Service (WSUS) contains a deserialization of untrusted data vulnerability that allows for remote code execution. Added to CISA KEV on 2025-10-24 (federal deadline 2025-11-14).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Windows","fixed_versions":[],"ids":["CVE-2025-59287"],"stack":["windows"],"first_seen":"2025-10-24T12:00:00.000Z","updated_at":"2025-10-24T12:00:00.000Z"}]}