Browse All CVEs
50,449 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-78518 |
high | 8.8 | 0.0086 | 2026-10-30 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute co | |
CVE-2026-78517 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-78515 |
medium | 6.5 | 0.0092 | 2026-10-30 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-78513 |
medium | 5.5 | 0.0054 | 2026-10-30 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl | |
CVE-2026-78511 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-78510 |
high | 8.4 | 0.0037 | 2026-10-30 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-78509 |
critical | 9.8 | 0.0097 | 2026-10-30 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to | |
CVE-2026-78508 |
medium | 4.6 | 0.0047 | 2026-10-30 | Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose in | |
CVE-2026-78505 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-78504 |
high | 8.8 | 0.0082 | 2026-10-30 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to ex | |
CVE-2026-78502 |
medium | 6.5 | 0.0092 | 2026-10-30 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-78501 |
high | 8.6 | 0.0054 | 2026-10-30 | Improper neutralization of special elements used in a command ('command injection') in Mic | |
CVE-2026-78463 |
high | 8.8 | 0.0086 | 2026-10-30 | Improper control of generation of code ('code injection') in Remote Desktop Client allows | |
CVE-2026-78461 |
high | 7.4 | 0.0104 | 2026-10-30 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual S | |
CVE-2026-78439 |
high | 8.8 | 0.0084 | 2026-10-30 | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacke | |
CVE-2026-77909 |
high | 7.7 | 0.0058 | 2026-10-30 | Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to | |
CVE-2026-77908 |
high | 8.8 | 0.0099 | 2026-10-30 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows | |
CVE-2026-77907 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute cod | |
CVE-2026-77904 |
high | 7.8 | 0.0033 | 2026-10-30 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized | |
CVE-2026-77899 |
high | 7.0 | 0.0026 | 2026-10-30 | Use after free in Windows Security Center allows an authorized attacker to elevate privile | |
CVE-2026-77898 |
high | 7.5 | 0.0061 | 2026-10-30 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-77896 |
medium | 6.5 | 0.0070 | 2026-10-30 | Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to | |
CVE-2026-77895 |
high | 7.5 | 0.0117 | 2026-10-30 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service | |
CVE-2026-77894 |
high | 7.0 | 0.0020 | 2026-10-30 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-77893 |
high | 7.5 | 0.0117 | 2026-10-30 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service | |
CVE-2026-77892 |
medium | 6.8 | 0.0044 | 2026-10-30 | No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate p | |
CVE-2026-77891 |
medium | 6.4 | 0.0028 | 2026-10-30 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code lo | |
CVE-2026-77890 |
high | 7.5 | 0.0117 | 2026-10-30 | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allow | |
CVE-2026-77889 |
high | 7.5 | 0.0117 | 2026-10-30 | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allow | |
CVE-2026-77888 |
high | 7.5 | 0.0117 | 2026-10-30 | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allow | |
CVE-2026-77887 |
medium | 6.4 | 0.0028 | 2026-10-30 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code lo | |
CVE-2026-77886 |
high | 7.5 | 0.0117 | 2026-10-30 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service | |
CVE-2026-77505 |
high | 8.1 | 0.0071 | 2026-10-30 | Use after free in DNS Server allows an unauthorized attacker to execute code over a networ | |
CVE-2026-77504 |
high | 8.8 | 0.0082 | 2026-10-30 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code over | |
CVE-2026-77503 |
high | 8.4 | 0.0034 | 2026-10-30 | Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges l | |
CVE-2026-77502 |
high | 7.5 | 0.0117 | 2026-10-30 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service | |
CVE-2026-77501 |
high | 7.5 | 0.0117 | 2026-10-30 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service | |
CVE-2026-77500 |
high | 7.8 | 0.0033 | 2026-10-30 | Release of invalid pointer or reference in Windows Device Association Service allows an au | |
CVE-2026-77499 |
high | 7.5 | 0.0117 | 2026-10-30 | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allow | |
CVE-2026-77498 |
high | 7.5 | 0.0117 | 2026-10-30 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service | |
CVE-2026-77495 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to | |
CVE-2026-77494 |
high | 7.5 | 0.0117 | 2026-10-30 | Access of resource using incompatible type ('type confusion') in Windows DHCP Server allow | |
CVE-2026-77493 |
critical | 9.8 | 0.0097 | 2026-10-30 | Double free in Microsoft Graphics Component allows an unauthorized attacker to execute cod | |
CVE-2026-77492 |
medium | 5.5 | 0.0040 | 2026-10-30 | Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose inform | |
CVE-2026-77491 |
medium | 5.5 | 0.0043 | 2026-10-30 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information | |
CVE-2026-77489 |
high | 7.8 | 0.0033 | 2026-10-30 | Null pointer dereference in Windows Biometric Service allows an authorized attacker to ele | |
CVE-2026-73029 |
medium | 6.5 | 0.0100 | 2026-10-30 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over | |
CVE-2026-72986 |
high | 8.8 | 0.0082 | 2026-10-30 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute cod | |
CVE-2026-72983 |
critical | 9.8 | 0.0097 | 2026-10-30 | Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacke | |
CVE-2026-72982 |
critical | 9.8 | 0.0097 | 2026-10-30 | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute |