Vendor CVEs
Microsoft
All CVEs
18,136 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-69676 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network. | ||
| CVE-2026-69671 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69669 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69649 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69632 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69629 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69628 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network. | ||
| CVE-2026-69614 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69603 | Hig | 0.57 | 8.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. | ||
| CVE-2026-69601 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69598 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69556 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69551 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Use after free in Windows DNS allows an authorized attacker to execute code over a network. | ||
| CVE-2026-69547 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-69529 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69522 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69518 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69511 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69499 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69495 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69494 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69485 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. | ||
| CVE-2026-69465 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||
| CVE-2026-69464 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-69461 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69442 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69439 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. | ||
| CVE-2026-69434 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69386 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69360 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69355 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-69334 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69291 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69285 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69282 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||
| CVE-2026-69273 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||
| CVE-2026-69268 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||
| CVE-2026-69266 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-68828 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-68786 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-68775 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-67642 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-67639 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-67638 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-67388 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-67385 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Use after free in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-67384 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-67381 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-67380 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-67373 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
- risk 0.57cvss 8.8epss 0.01
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.00
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Use after free in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Page 34 of 363