Vendor CVEs
Microsoft
All CVEs
18,136 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-102203 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-100220 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-100214 | Hig | 0.57 | 8.8 | 0.02 | Oct 13, 2026 | Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network. | ||
| CVE-2026-100212 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-100211 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-100210 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-100209 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-96198 | hig | 0.57 | 8.8 | — | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-85890 | hig | 0.57 | 8.8 | — | Oct 13, 2026 | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-96199 | hig | 0.57 | 8.8 | — | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-85897 | hig | 0.57 | 8.8 | — | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83943 | Hig | 0.57 | 8.7 | 0.00 | Oct 8, 2026 | Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-96940 | Hig | 0.57 | 8.8 | 0.00 | Oct 2, 2026 | Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-70125 | Hig | 0.57 | 8.8 | 0.00 | Sep 23, 2026 | Microsoft Office Outlook Remote Code Execution Vulnerability | ||
| CVE-2026-85893 | Hig | 0.57 | 8.8 | 0.01 | Sep 15, 2026 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | ||
| CVE-2026-69486 | Hig | 0.57 | 8.8 | 0.01 | Sep 15, 2026 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-85877 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83998 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-83996 | Hig | 0.57 | 8.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-83992 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-81955 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-81952 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-81385 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-81352 | Hig | 0.57 | 8.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-80096 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-80085 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-80083 | Hig | 0.57 | 8.8 | 0.00 | Sep 8, 2026 | Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally. | ||
| CVE-2026-80081 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-80080 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-80077 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-80074 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78526 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78525 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78524 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78521 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78519 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78518 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78517 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78514 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78512 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78511 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78507 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78505 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78504 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78463 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78462 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||
| CVE-2026-78456 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-78442 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-78439 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-77908 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. |
- risk 0.57cvss 8.8epss 0.01
Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.02
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss —
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss —
Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss —
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss —
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.7epss 0.00
Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.
- risk 0.57cvss 8.8epss 0.00
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.00
Microsoft Office Outlook Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
Page 32 of 363