Vendor CVEs
Microsoft
All CVEs
18,136 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-85931 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. | ||
| CVE-2026-85905 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85903 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-85900 | Hig | 0.57 | 8.8 | 0.02 | Oct 13, 2026 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||
| CVE-2026-85817 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-85339 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | ||
| CVE-2026-83934 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83929 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83928 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83923 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83891 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83889 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-83874 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83851 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network. | ||
| CVE-2026-83797 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83789 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network. | ||
| CVE-2026-83784 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-83778 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83777 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network. | ||
| CVE-2026-83771 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network. | ||
| CVE-2026-83759 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network. | ||
| CVE-2026-83728 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally. | ||
| CVE-2026-83725 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83716 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. | ||
| CVE-2026-83688 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83643 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83642 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83523 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-77910 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-77902 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-77496 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70580 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally. | ||
| CVE-2026-70343 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70302 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70301 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70299 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70297 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network. | ||
| CVE-2026-70287 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70282 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70275 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70268 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70266 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-70262 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network. | ||
| CVE-2026-70258 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70257 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70256 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70254 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-70250 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network. | ||
| CVE-2026-70246 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-70215 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.01
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.
- risk 0.57cvss 8.8epss 0.01
Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.01
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
- risk 0.57cvss 8.8epss 0.01
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Page 30 of 363