All Critical High Medium Low
CVE Severity CVSS EPSS First Seen Flags Description
CVE-2026-78518 high 8.8 0.0086 2026-10-30 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute co
CVE-2026-78517 high 8.8 0.0082 2026-10-30 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe
CVE-2026-78515 medium 6.5 0.0092 2026-10-30 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i
CVE-2026-78513 medium 5.5 0.0054 2026-10-30 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to discl
CVE-2026-78511 high 8.8 0.0082 2026-10-30 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe
CVE-2026-78510 high 8.4 0.0037 2026-10-30 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute
CVE-2026-78509 critical 9.8 0.0097 2026-10-30 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to
CVE-2026-78508 medium 4.6 0.0047 2026-10-30 Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose in
CVE-2026-78505 high 8.8 0.0082 2026-10-30 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute
CVE-2026-78504 high 8.8 0.0082 2026-10-30 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to ex
CVE-2026-78502 medium 6.5 0.0092 2026-10-30 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in
CVE-2026-78501 high 8.6 0.0054 2026-10-30 Improper neutralization of special elements used in a command ('command injection') in Mic
CVE-2026-78463 high 8.8 0.0086 2026-10-30 Improper control of generation of code ('code injection') in Remote Desktop Client allows
CVE-2026-78461 high 7.4 0.0104 2026-10-30 Improper limitation of a pathname to a restricted directory ('path traversal') in Visual S
CVE-2026-78439 high 8.8 0.0084 2026-10-30 Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacke
CVE-2026-77909 high 7.7 0.0058 2026-10-30 Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to
CVE-2026-77908 high 8.8 0.0099 2026-10-30 Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows
CVE-2026-77907 high 8.8 0.0082 2026-10-30 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute cod
CVE-2026-77904 high 7.8 0.0033 2026-10-30 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized
CVE-2026-77899 high 7.0 0.0026 2026-10-30 Use after free in Windows Security Center allows an authorized attacker to elevate privile
CVE-2026-77898 high 7.5 0.0061 2026-10-30 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute
CVE-2026-77896 medium 6.5 0.0070 2026-10-30 Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to
CVE-2026-77895 high 7.5 0.0117 2026-10-30 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service
CVE-2026-77894 high 7.0 0.0020 2026-10-30 Concurrent execution using shared resource with improper synchronization ('race condition'
CVE-2026-77893 high 7.5 0.0117 2026-10-30 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service
CVE-2026-77892 medium 6.8 0.0044 2026-10-30 No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate p
CVE-2026-77891 medium 6.4 0.0028 2026-10-30 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code lo
CVE-2026-77890 high 7.5 0.0117 2026-10-30 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allow
CVE-2026-77889 high 7.5 0.0117 2026-10-30 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allow
CVE-2026-77888 high 7.5 0.0117 2026-10-30 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allow
CVE-2026-77887 medium 6.4 0.0028 2026-10-30 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code lo
CVE-2026-77886 high 7.5 0.0117 2026-10-30 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service
CVE-2026-77505 high 8.1 0.0071 2026-10-30 Use after free in DNS Server allows an unauthorized attacker to execute code over a networ
CVE-2026-77504 high 8.8 0.0082 2026-10-30 Double free in Microsoft Office Word allows an unauthorized attacker to execute code over
CVE-2026-77503 high 8.4 0.0034 2026-10-30 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges l
CVE-2026-77502 high 7.5 0.0117 2026-10-30 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service
CVE-2026-77501 high 7.5 0.0117 2026-10-30 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service
CVE-2026-77500 high 7.8 0.0033 2026-10-30 Release of invalid pointer or reference in Windows Device Association Service allows an au
CVE-2026-77499 high 7.5 0.0117 2026-10-30 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allow
CVE-2026-77498 high 7.5 0.0117 2026-10-30 Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service
CVE-2026-77495 high 8.8 0.0082 2026-10-30 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to
CVE-2026-77494 high 7.5 0.0117 2026-10-30 Access of resource using incompatible type ('type confusion') in Windows DHCP Server allow
CVE-2026-77493 critical 9.8 0.0097 2026-10-30 Double free in Microsoft Graphics Component allows an unauthorized attacker to execute cod
CVE-2026-77492 medium 5.5 0.0040 2026-10-30 Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose inform
CVE-2026-77491 medium 5.5 0.0043 2026-10-30 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information
CVE-2026-77489 high 7.8 0.0033 2026-10-30 Null pointer dereference in Windows Biometric Service allows an authorized attacker to ele
CVE-2026-73029 medium 6.5 0.0100 2026-10-30 Buffer over-read in SQL Server allows an authorized attacker to disclose information over
CVE-2026-72986 high 8.8 0.0082 2026-10-30 Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute cod
CVE-2026-72983 critical 9.8 0.0097 2026-10-30 Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacke
CVE-2026-72982 critical 9.8 0.0097 2026-10-30 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute