Browse All CVEs
10,479 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-68797 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-66809 |
medium | 5.5 | 0.0043 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose informa | |
CVE-2026-66810 |
medium | 5.5 | 0.0043 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to dis | |
CVE-2026-66806 |
medium | 5.5 | 0.0043 | 2026-10-29 | Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose info | |
CVE-2026-65799 |
medium | 6.7 | 0.0034 | 2026-10-29 | Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate pri | |
CVE-2026-65797 |
medium | 6.7 | 0.0035 | 2026-10-29 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privilege | |
CVE-2026-65798 |
medium | 6.7 | 0.0035 | 2026-10-29 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privilege | |
CVE-2026-65794 |
medium | 6.5 | 0.0092 | 2026-10-29 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose informa | |
CVE-2026-65795 |
medium | 6.7 | 0.0035 | 2026-10-29 | Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges | |
CVE-2026-65777 |
medium | 5.3 | 0.0036 | 2026-10-29 | Inadequate encryption strength in Windows Active Directory allows an authorized attacker t | |
CVE-2026-64917 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-64916 |
medium | 4.6 | 0.0058 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-64902 |
medium | 4.6 | 0.0058 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-64899 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose informa | |
CVE-2026-64897 |
medium | 4.6 | 0.0058 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-63531 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-63529 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose informa | |
CVE-2026-63530 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-63528 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose in | |
CVE-2026-63524 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose informa | |
CVE-2026-62917 |
medium | 4.6 | 0.0058 | 2026-10-29 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to | |
CVE-2026-62887 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information l | |
CVE-2026-62882 |
medium | 4.3 | 0.0067 | 2026-10-29 | Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized at | |
CVE-2026-62883 |
medium | 6.7 | 0.0035 | 2026-10-29 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privilege | |
CVE-2026-62881 |
medium | 6.7 | 0.0035 | 2026-10-29 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privilege | |
CVE-2026-62842 |
medium | 5.5 | 0.0054 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose informa | |
CVE-2026-62839 |
medium | 6.5 | 0.0091 | 2026-10-29 | Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized a | |
CVE-2026-62814 |
medium | 6.5 | 0.0054 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attac | |
CVE-2026-62793 |
medium | 5.5 | 0.0040 | 2026-10-29 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information loc | |
CVE-2026-62786 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information | |
CVE-2026-62782 |
medium | 6.5 | 0.0092 | 2026-10-29 | Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose infor | |
CVE-2026-62769 |
medium | 6.7 | 0.0035 | 2026-10-29 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privilege | |
CVE-2026-62757 |
medium | 5.3 | 0.0035 | 2026-10-29 | Improper verification of cryptographic signature in Windows Schannel allows an unauthorize | |
CVE-2026-62743 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information | |
CVE-2026-62738 |
medium | 5.5 | 0.0040 | 2026-10-29 | Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to | |
CVE-2026-62730 |
medium | 5.5 | 0.0040 | 2026-10-29 | Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disc | |
CVE-2026-62720 |
medium | 6.5 | 0.0054 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attac | |
CVE-2026-62714 |
medium | 6.5 | 0.0054 | 2026-10-29 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attac | |
CVE-2026-62709 |
medium | 5.5 | 0.0040 | 2026-10-29 | Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose in | |
CVE-2026-62708 |
medium | 6.4 | 0.0034 | 2026-10-29 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges wit | |
CVE-2026-61920 |
medium | 6.6 | 0.0052 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-61921 |
medium | 6.5 | 0.0092 | 2026-10-29 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose in | |
CVE-2026-61918 |
medium | 6.5 | 0.0092 | 2026-10-29 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose in | |
CVE-2026-61360 |
medium | 5.5 | 0.0040 | 2026-10-29 | Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose inf | |
CVE-2026-59131 |
medium | 5.6 | 0.0031 | 2026-10-29 | No cwe for this issue in AMD Zen allows an authorized attacker to disclose information loc | |
CVE-2026-58639 |
medium | 6.5 | 0.0091 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized att | |
CVE-2026-12887 |
medium | 5.1 | 0.0024 | 2026-10-29 | In affected versions of Octopus Server, a user with permission to upload a malicious nuget | |
CVE-2026-16307 |
medium | 4.3 | 0.0019 | 2026-10-29 | Authorization bypass through User-Controlled key vulnerability in Netiket Information Tech | |
CVE-2026-68866 |
medium | 6.5 | 0.0022 | 2026-10-29 | PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release ve | |
CVE-2026-90725 |
medium | 4.9 | 0.0026 | 2026-10-29 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 relea |