Browse All CVEs
9,549 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-70316 |
medium | 5.5 | 0.0043 | 2026-10-29 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker t | |
CVE-2026-70317 |
medium | 5.5 | 0.0043 | 2026-10-29 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to discl | |
CVE-2026-70314 |
medium | 5.5 | 0.0054 | 2026-10-29 | Improper input validation in Microsoft Office allows an unauthorized attacker to disclose | |
CVE-2026-70315 |
medium | 5.5 | 0.0043 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose informa | |
CVE-2026-70312 |
medium | 5.5 | 0.0043 | 2026-10-29 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker t | |
CVE-2026-70304 |
medium | 6.7 | 0.0034 | 2026-10-29 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privile | |
CVE-2026-69550 |
medium | 6.5 | 0.0092 | 2026-10-29 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose in | |
CVE-2026-68819 |
medium | 5.9 | 0.0098 | 2026-10-29 | Buffer over-read in Windows Network File System allows an unauthorized attacker to deny se | |
CVE-2026-68808 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-68809 |
medium | 5.5 | 0.0043 | 2026-10-29 | Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-68802 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-65813 |
medium | 6.5 | 0.0094 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attac | |
CVE-2026-65785 |
medium | 6.5 | 0.0058 | 2026-10-29 | Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker t | |
CVE-2026-65784 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information l | |
CVE-2026-65662 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information lo | |
CVE-2026-64922 |
medium | 4.6 | 0.0058 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-63521 |
medium | 5.5 | 0.0043 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-63517 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose informa | |
CVE-2026-63516 |
medium | 6.5 | 0.0187 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-63512 |
medium | 6.5 | 0.0073 | 2026-10-29 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to pe | |
CVE-2026-62915 |
medium | 6.5 | 0.0064 | 2026-10-29 | Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass | |
CVE-2026-62912 |
medium | 6.5 | 0.0198 | 2026-10-29 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attack | |
CVE-2026-62837 |
medium | 6.5 | 0.0123 | 2026-10-29 | Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to di | |
CVE-2026-62829 |
medium | 4.6 | 0.0047 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-62826 |
medium | 4.6 | 0.0058 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-62798 |
medium | 5.5 | 0.0040 | 2026-10-29 | Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose | |
CVE-2026-62796 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information l | |
CVE-2026-62750 |
medium | 6.5 | 0.0068 | 2026-10-29 | Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker t | |
CVE-2026-62745 |
medium | 6.5 | 0.0054 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attac | |
CVE-2026-62746 |
medium | 5.5 | 0.0040 | 2026-10-29 | Buffer over-read in Windows Win32K allows an authorized attacker to disclose information l | |
CVE-2026-62742 |
medium | 6.5 | 0.0054 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attac | |
CVE-2026-62718 |
medium | 6.5 | 0.0054 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attac | |
CVE-2026-62715 |
medium | 6.5 | 0.0054 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attac | |
CVE-2026-62716 |
medium | 6.5 | 0.0054 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attac | |
CVE-2026-62703 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose i | |
CVE-2026-62699 |
medium | 6.8 | 0.0044 | 2026-10-29 | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows | |
CVE-2026-62702 |
medium | 6.8 | 0.0098 | 2026-10-29 | Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to den | |
CVE-2026-61936 |
medium | 5.5 | 0.0030 | 2026-10-29 | Missing authorization in Windows Defender Firewall Service allows an authorized attacker t | |
CVE-2026-61933 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose i | |
CVE-2026-61928 |
medium | 5.5 | 0.0023 | 2026-10-29 | Cleartext storage of sensitive information in Windows Hello allows an authorized attacker | |
CVE-2026-61924 |
medium | 6.5 | 0.0092 | 2026-10-29 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose in | |
CVE-2026-61368 |
medium | 5.0 | 0.0043 | 2026-10-29 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose in | |
CVE-2026-61350 |
medium | 4.6 | 0.0047 | 2026-10-29 | Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information w | |
CVE-2026-61347 |
medium | 5.5 | 0.0040 | 2026-10-29 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclos | |
CVE-2026-61345 |
medium | 6.5 | 0.0114 | 2026-10-29 | Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacke | |
CVE-2026-59137 |
medium | 5.5 | 0.0040 | 2026-10-29 | Use of uninitialized resource in Windows Event Logging Service allows an authorized attack | |
CVE-2026-59138 |
medium | 6.5 | 0.0114 | 2026-10-29 | Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacke | |
CVE-2026-59135 |
medium | 5.5 | 0.0035 | 2026-10-29 | Weak authentication in Microsoft Windows Search Component allows an authorized attacker to | |
CVE-2026-59136 |
medium | 5.5 | 0.0040 | 2026-10-29 | Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker t | |
CVE-2026-59128 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker t |