Improper Restriction of Names for Files and Other Resources

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2026-25177Microsoft · CVSS 8.8 · 1.4% likely

   Microsoft

2. Improper Restriction of Names for Files and Other Resources in lirantal/daloradiusCVE-2023-0046lirantal · CVSS 7.2 · 1.1% likely

   Lirantal

3. Windows Distributed File System (DFS) Remote Code Execution VulnerabilityCVE-2024-30063Microsoft · CVSS 6.7 · 1.0% likely

   Microsoft

4. Microsoft Outlook Remote Code Execution VulnerabilityCVE-2025-21361Microsoft · CVSS 7.8 · 0.8% likely

   Microsoft

5. Microsoft Office OneNote Remote Code Execution VulnerabilityCVE-2025-21402Microsoft · CVSS 7.8 · 0.7% likely

   Microsoft

6. yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)CVE-2026-50023yt-dlp · CVSS 8.3 · 0.7% likely

   Yt-Dlp

7. File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources, which may contain sen…CVE-2022-36302Bosch · CVSS 8.8 · 0.6% likely

   Bosch

8. Microsoft Office Remote Code Execution VulnerabilityCVE-2025-47173Microsoft · CVSS 7.8 · 0.6% likely

   Microsoft

9. Cisco Identity Services Engine Authenticated Write VulnerabilityCVE-2026-20282Cisco · CVSS 4.9 · 0.6% likelycovered by CyberSIXT

   Cisco1 article

10. Microsoft Office Remote Code Execution VulnerabilityCVE-2025-47953Microsoft · CVSS 8.4 · 0.6% likely

    Microsoft

11. Arbitrary language parameter can passed to `aspell` executable via spelling requests in overleafCVE-2024-45312overleaf · CVSS 5.3 · 0.5% likely
12. 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient input validation allowing for uploading more audio clips th…CVE-2024-47260Axis Communications AB · CVSS 6.5 · 0.4% likely

    Axis Communications AB

13. GitHub Copilot Remote Code Execution VulnerabilityCVE-2026-50510Microsoft · CVSS 7.8 · 0.4% likely

    Microsoft

14. Python Elevation of Privilege VulnerabilityCVE-2026-85864Microsoft · CVSS 7.8 · 0.3% likely

    Microsoft

15. Luminance Studio 2.17 Denial of Service via Malformed InputCVE-2019-25623Pixarra · CVSS 6.2 · 0.2% likely

    Pixarra

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.