Vendor CVEs
Microsoft
All CVEs
18,147 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-83655 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-83647 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-83645 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-83635 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-83516 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70281 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-70251 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-70207 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network. | ||
| CVE-2026-70202 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-70163 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70155 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70133 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70095 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70082 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70079 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70058 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70033 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70031 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-70014 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network. | ||
| CVE-2026-70012 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70006 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70004 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69998 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69997 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69996 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69995 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69994 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69992 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69991 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69988 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69987 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69986 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69984 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69976 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69789 | Hig | 0.49 | 7.5 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. | ||
| CVE-2026-69577 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-69454 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-108131 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | ||
| CVE-2026-105728 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-105723 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. | ||
| CVE-2026-105715 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-105714 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-105599 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-105592 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-105009 | Hig | 0.49 | 7.5 | 0.00 | Oct 13, 2026 | Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-103577 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network. | ||
| CVE-2026-103569 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-103558 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-102192 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-100208 | Hig | 0.49 | 7.5 | 0.00 | Sep 25, 2026 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
- risk 0.49cvss 7.5epss 0.01
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
- risk 0.49cvss 7.5epss 0.01
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
- risk 0.49cvss 7.5epss 0.01
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
- risk 0.49cvss 7.5epss 0.01
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.00
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
- risk 0.49cvss 7.5epss 0.01
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
- risk 0.49cvss 7.5epss 0.01
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
- risk 0.49cvss 7.5epss 0.01
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
- risk 0.49cvss 7.5epss 0.01
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
- risk 0.49cvss 7.5epss 0.01
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
- risk 0.49cvss 7.5epss 0.01
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.00
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
- risk 0.49cvss 7.5epss 0.01
Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.49cvss 7.5epss 0.01
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
- risk 0.49cvss 7.5epss 0.01
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.01
Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
- risk 0.49cvss 7.5epss 0.00
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Page 146 of 363