Browse All CVEs
13,189 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-70347 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate p | |
CVE-2026-70345 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate p | |
CVE-2026-70346 |
high | 7.8 | 0.0033 | 2026-10-29 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate | |
CVE-2026-70329 |
high | 8.8 | 0.0082 | 2026-10-29 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker | |
CVE-2026-70324 |
high | 8.8 | 0.0094 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized att | |
CVE-2026-70313 |
high | 7.8 | 0.0047 | 2026-10-29 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker t | |
CVE-2026-70311 |
high | 7.8 | 0.0047 | 2026-10-29 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code lo | |
CVE-2026-70307 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attac | |
CVE-2026-69519 |
high | 8.6 | 0.0103 | 2026-10-29 | Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disc | |
CVE-2026-68816 |
high | 7.8 | 0.0047 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to e | |
CVE-2026-68815 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-68810 |
high | 7.8 | 0.0047 | 2026-10-29 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to | |
CVE-2026-68811 |
high | 7.8 | 0.0047 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel al | |
CVE-2026-68806 |
high | 7.8 | 0.0047 | 2026-10-29 | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute c | |
CVE-2026-68796 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-68800 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-68795 |
high | 7.8 | 0.0047 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to e | |
CVE-2026-68793 |
high | 7.8 | 0.0047 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute co | |
CVE-2026-68794 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-68792 |
high | 7.8 | 0.0032 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Mic | |
CVE-2026-66799 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate p | |
CVE-2026-65814 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to | |
CVE-2026-65807 |
high | 8.8 | 0.0082 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel al | |
CVE-2026-65788 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileg | |
CVE-2026-65789 |
high | 8.1 | 0.0071 | 2026-10-29 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a netwo | |
CVE-2026-65786 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elev | |
CVE-2026-65787 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elev | |
CVE-2026-65783 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges lo | |
CVE-2026-65678 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges local | |
CVE-2026-65672 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to e | |
CVE-2026-65671 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to e | |
CVE-2026-65665 |
high | 8.8 | 0.0169 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-65663 |
high | 8.8 | 0.0204 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-65664 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-65661 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-65657 |
high | 7.8 | 0.0047 | 2026-10-29 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally | |
CVE-2026-65658 |
high | 8.8 | 0.0204 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-65656 |
high | 7.8 | 0.0046 | 2026-10-29 | Improper neutralization of special elements used in a command ('command injection') in Mic | |
CVE-2026-63520 |
high | 8.1 | 0.0096 | 2026-10-29 | 1 PoC | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker t |
CVE-2026-63519 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-63518 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-63515 |
high | 7.8 | 0.0047 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code loc | |
CVE-2026-63514 |
high | 8.8 | 0.0204 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-63513 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-62914 |
high | 7.3 | 0.0045 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-62913 |
high | 8.8 | 0.0091 | 2026-10-29 | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to e | |
CVE-2026-62910 |
high | 7.2 | 0.0100 | 2026-10-29 | Improper control of resource identifiers ('resource injection') in Microsoft Exchange Serv | |
CVE-2026-62908 |
high | 7.0 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-62894 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to el | |
CVE-2026-62892 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Capability Access Management Service (camsvc) allows an authorized attac |