Browse All CVEs
13,193 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-55049 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-55048 |
high | 7.8 | 0.0047 | 2026-10-29 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker t | |
CVE-2026-55044 |
high | 7.8 | 0.0047 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute co | |
CVE-2026-55045 |
high | 8.4 | 0.0045 | 2026-10-29 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code loc | |
CVE-2026-55043 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker | |
CVE-2026-55041 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-55038 |
high | 7.8 | 0.0057 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to ex | |
CVE-2026-55039 |
high | 7.8 | 0.0047 | 2026-10-29 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized at | |
CVE-2026-55036 |
high | 7.8 | 0.0047 | 2026-10-29 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code | |
CVE-2026-55037 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-55033 |
high | 7.8 | 0.0057 | 2026-10-29 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to | |
CVE-2026-55034 |
high | 7.3 | 0.0095 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-55031 |
high | 7.8 | 0.0047 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute co | |
CVE-2026-55032 |
high | 7.8 | 0.0057 | 2026-10-29 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code lo | |
CVE-2026-55029 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to ex | |
CVE-2026-55024 |
high | 7.8 | 0.0047 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel al | |
CVE-2026-55025 |
high | 7.8 | 0.0047 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel al | |
CVE-2026-55022 |
high | 7.8 | 0.0047 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows a | |
CVE-2026-55021 |
high | 7.3 | 0.0095 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-55017 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-55018 |
high | 7.8 | 0.0047 | 2026-10-29 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally | |
CVE-2026-55013 |
high | 7.1 | 0.0046 | 2026-10-29 | Uncontrolled search path element in Windows Remote Help Defense allows an authorized attac | |
CVE-2026-55009 |
high | 7.8 | 0.0251 | 2026-10-29 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attack | |
CVE-2026-55006 |
high | 7.8 | 0.0030 | 2026-10-29 | Insufficient granularity of access control in Microsoft Exchange Server allows an authoriz | |
CVE-2026-55004 |
high | 7.8 | 0.0033 | 2026-10-29 | Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileg | |
CVE-2026-55005 |
high | 8.8 | 0.0101 | 2026-10-29 | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to e | |
CVE-2026-55001 |
high | 7.8 | 0.0030 | 2026-10-29 | Improper certificate validation in Windows Active Directory allows an authorized attacker | |
CVE-2026-55002 |
high | 8.8 | 0.0091 | 2026-10-29 | External control of file name or path in SQL Server allows an authorized attacker to eleva | |
CVE-2026-54999 |
high | 8.8 | 0.0041 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-54995 |
high | 8.1 | 0.0079 | 2026-10-29 | Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized atta | |
CVE-2026-54996 |
high | 7.0 | 0.0020 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-54992 |
high | 8.4 | 0.0034 | 2026-10-29 | 1 PoC | Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized |
CVE-2026-54993 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized at | |
CVE-2026-54991 |
high | 7.8 | 0.0021 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-54989 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authori | |
CVE-2026-54986 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate priv | |
CVE-2026-54987 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elev | |
CVE-2026-54983 |
high | 7.5 | 0.0117 | 2026-10-29 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unau | |
CVE-2026-54984 |
high | 7.8 | 0.0047 | 2026-10-29 | 1 PoC | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to |
CVE-2026-54982 |
high | 8.8 | 0.0053 | 2026-10-29 | Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) all | |
CVE-2026-54129 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges loca | |
CVE-2026-54131 |
high | 7.8 | 0.0047 | 2026-10-29 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code l | |
CVE-2026-54128 |
high | 8.4 | 0.0036 | 2026-10-29 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code loca | |
CVE-2026-54127 |
high | 7.4 | 0.0031 | 2026-10-29 | Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges lo | |
CVE-2026-54124 |
high | 7.8 | 0.0047 | 2026-10-29 | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to exec | |
CVE-2026-54125 |
high | 7.8 | 0.0026 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-54121 |
high | 8.8 | 0.0078 | 2026-10-29 | 15 PoC | Improper authorization in Active Directory Certificate Services (AD CS) allows an authoriz |
CVE-2026-54122 |
high | 8.4 | 0.0036 | 2026-10-29 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code | |
CVE-2026-54119 |
high | 7.5 | 0.0117 | 2026-10-29 | Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows | |
CVE-2026-54114 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges local |