VYPR

Vendor CVEs

Microsoft

All CVEs

18,136 total · sorted by risk
  • CVE-2026-102203HigOct 13, 2026
    risk 0.57cvss 8.8epss 0.01

    Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.

  • CVE-2026-100220HigOct 13, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.

  • CVE-2026-100214HigOct 13, 2026
    risk 0.57cvss 8.8epss 0.02

    Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.

  • CVE-2026-100212HigOct 13, 2026
    risk 0.57cvss 8.8epss 0.01

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  • CVE-2026-100211HigOct 13, 2026
    risk 0.57cvss 8.8epss 0.01

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  • CVE-2026-100210HigOct 13, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  • CVE-2026-100209HigOct 13, 2026
    risk 0.57cvss 8.8epss 0.01

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  • CVE-2026-96198higOct 13, 2026
    risk 0.57cvss 8.8epss —

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  • CVE-2026-85890higOct 13, 2026
    risk 0.57cvss 8.8epss —

    Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  • CVE-2026-96199higOct 13, 2026
    risk 0.57cvss 8.8epss —

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  • CVE-2026-85897higOct 13, 2026
    risk 0.57cvss 8.8epss —

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  • CVE-2026-83943HigOct 8, 2026
    risk 0.57cvss 8.7epss 0.00

    Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.

  • CVE-2026-96940HigOct 2, 2026
    risk 0.57cvss 8.8epss 0.00

    Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-70125HigSep 23, 2026
    risk 0.57cvss 8.8epss 0.00

    Microsoft Office Outlook Remote Code Execution Vulnerability

  • CVE-2026-85893HigSep 15, 2026
    risk 0.57cvss 8.8epss 0.01

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-69486HigSep 15, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  • CVE-2026-85877HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.

  • CVE-2026-83998HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  • CVE-2026-83996HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.00

    Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  • CVE-2026-83992HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

  • CVE-2026-81955HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

  • CVE-2026-81952HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  • CVE-2026-81385HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

  • CVE-2026-81352HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.00

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

  • CVE-2026-80096HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

  • CVE-2026-80085HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  • CVE-2026-80083HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.00

    Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

  • CVE-2026-80081HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  • CVE-2026-80080HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  • CVE-2026-80077HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  • CVE-2026-80074HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78526HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78525HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78524HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78521HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78519HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78518HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78517HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78514HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78512HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78511HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78507HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78505HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78504HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78463HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78462HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  • CVE-2026-78456HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  • CVE-2026-78442HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.

  • CVE-2026-78439HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

  • CVE-2026-77908HigSep 8, 2026
    risk 0.57cvss 8.8epss 0.01

    Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

Page 32 of 363