Browse All CVEs
13,178 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-105727 |
high | 8.8 | 0.0104 | 2026-10-29 | Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics | |
CVE-2026-105725 |
high | 7.0 | 0.0029 | 2026-10-29 | Use after free in Windows Security App allows an authorized attacker to elevate privileges | |
CVE-2026-105717 |
high | 8.8 | 0.0088 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-105718 |
high | 8.8 | 0.0095 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute co | |
CVE-2026-105715 |
high | 7.5 | 0.0061 | 2026-10-29 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to | |
CVE-2026-105716 |
high | 8.8 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-105714 |
high | 7.5 | 0.0061 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-105599 |
high | 7.5 | 0.0062 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker | |
CVE-2026-105597 |
high | 8.8 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-105598 |
high | 8.8 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-105596 |
high | 8.8 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-105593 |
high | 8.8 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-105595 |
high | 8.8 | 0.0082 | 2026-10-29 | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute c | |
CVE-2026-105591 |
high | 8.8 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-105592 |
high | 7.5 | 0.0061 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-103572 |
high | 8.8 | 0.0099 | 2026-10-29 | Improper control of generation of code ('code injection') in Visual Studio Tools for Appli | |
CVE-2026-102866 |
high | 8.1 | 0.0067 | 2026-10-29 | Improper verification of cryptographic signature in Microsoft Office SharePoint allows an | |
CVE-2026-102863 |
high | 8.8 | 0.0102 | 2026-10-29 | Improper control of generation of code ('code injection') in Microsoft Office SharePoint a | |
CVE-2026-102861 |
high | 8.8 | 0.0081 | 2026-10-29 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elev | |
CVE-2026-102862 |
high | 8.8 | 0.0079 | 2026-10-29 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to el | |
CVE-2026-102860 |
high | 8.8 | 0.0081 | 2026-10-29 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to el | |
CVE-2026-102858 |
high | 8.8 | 0.0086 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to | |
CVE-2026-102856 |
high | 8.8 | 0.0089 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to ex | |
CVE-2026-102857 |
high | 8.8 | 0.0090 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to ex | |
CVE-2026-102850 |
high | 8.8 | 0.0077 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-102855 |
high | 8.8 | 0.0078 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to ex | |
CVE-2026-102849 |
high | 8.8 | 0.0077 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-102235 |
high | 8.8 | 0.0072 | 2026-10-29 | Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attac | |
CVE-2026-102233 |
high | 7.8 | 0.0043 | 2026-10-29 | Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a se | |
CVE-2026-102234 |
high | 7.4 | 0.0082 | 2026-10-29 | Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauth | |
CVE-2026-102232 |
high | 7.0 | 0.0034 | 2026-10-29 | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a | |
CVE-2026-97830 |
high | 7.5 | 0.0107 | 2026-10-29 | Double free in Windows Internet Information Services allows an unauthorized attacker to de | |
CVE-2026-97812 |
high | 7.0 | 0.0028 | 2026-10-29 | Double free in Windows Update Orchestrator Service allows an authorized attacker to elevat | |
CVE-2026-97811 |
high | 7.8 | 0.0029 | 2026-10-29 | Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges loc | |
CVE-2026-97809 |
high | 7.8 | 0.0030 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-97810 |
high | 7.0 | 0.0028 | 2026-10-29 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) a | |
CVE-2026-97807 |
high | 7.8 | 0.0030 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-97808 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-97806 |
high | 7.8 | 0.0035 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-97803 |
high | 7.8 | 0.0035 | 2026-10-29 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv | |
CVE-2026-97804 |
high | 7.8 | 0.0034 | 2026-10-29 | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate pr | |
CVE-2026-97799 |
high | 7.8 | 0.0032 | 2026-10-29 | Improper verification of cryptographic signature in Windows Audio Service allows an author | |
CVE-2026-97801 |
high | 7.5 | 0.0073 | 2026-10-29 | Improper validation of specified type of input in .NET Framework allows an unauthorized at | |
CVE-2026-97798 |
high | 7.8 | 0.0037 | 2026-10-29 | 2 PoC | Improper neutralization of argument delimiters in a command ('argument injection') in Wind |
CVE-2026-97792 |
high | 7.8 | 0.0032 | 2026-10-29 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allo | |
CVE-2026-97793 |
high | 7.0 | 0.0025 | 2026-10-29 | Missing authentication for critical function in Windows Setup and Deployment allows an aut | |
CVE-2026-97788 |
high | 7.5 | 0.0088 | 2026-10-29 | Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthori | |
CVE-2026-97787 |
high | 7.0 | 0.0021 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-97781 |
high | 8.8 | 0.0088 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Mic | |
CVE-2026-97775 |
high | 8.8 | 0.0084 | 2026-10-29 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code o |