Vendor CVEs
Microsoft
All CVEs
16,667 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-78505 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78504 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78463 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78462 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||
| CVE-2026-78456 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-78442 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78439 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-77908 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. | ||
| CVE-2026-77907 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-77906 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-77901 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-77504 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-77495 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-77487 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-77486 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-77484 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-77483 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-77482 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-77481 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-77480 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-73028 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-73023 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-73018 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-73016 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-73013 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-73012 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-73006 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-72986 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-72973 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-72972 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-72960 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-72959 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | ||
| CVE-2026-72950 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | ||
| CVE-2026-72940 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-72933 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-71352 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network. | ||
| CVE-2026-71336 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network. | ||
| CVE-2026-71328 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70586 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70351 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70203 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69860 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69797 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69784 | Hig | 0.57 | 8.8 | 0.00 | Sep 8, 2026 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69778 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69772 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69767 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69764 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69759 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69742 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. |
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
- risk 0.57cvss 8.8epss 0.01
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
Page 27 of 334