Vendor CVEs
Microsoft
All CVEs
18,136 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-97748 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97747 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97746 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97745 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97742 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97741 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97739 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97738 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97017 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97012 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97011 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97010 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97008 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97007 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97004 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-97003 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-96957 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | ||
| CVE-2026-96952 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-96943 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-96917 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96914 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96913 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96251 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-96202 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-96044 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-88219 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88202 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88200 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-88198 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-88197 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88196 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88186 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88166 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||
| CVE-2026-88165 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. | ||
| CVE-2026-88163 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||
| CVE-2026-88159 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88157 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88155 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||
| CVE-2026-88150 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88145 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88144 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88142 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88136 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network. | ||
| CVE-2026-88116 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88115 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88114 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88112 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-88075 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-88073 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85936 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Double free in Windows Shell allows an unauthorized attacker to execute code over a network. |
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.00
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.00
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.01
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.00
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.01
Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
Page 29 of 363