Browse All CVEs
13,197 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-66807 |
high | 7.8 | 0.0047 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-66808 |
high | 8.8 | 0.0204 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-66802 |
high | 8.1 | 0.0054 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-66805 |
high | 8.8 | 0.0204 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-66800 |
high | 8.6 | 0.0097 | 2026-10-29 | Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker t | |
CVE-2026-65810 |
high | 7.8 | 0.0040 | 2026-10-29 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privi | |
CVE-2026-65796 |
high | 8.1 | 0.0071 | 2026-10-29 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker | |
CVE-2026-65790 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to ele | |
CVE-2026-65782 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges lo | |
CVE-2026-65780 |
high | 7.0 | 0.0026 | 2026-10-29 | Double free in Windows Autopilot allows an authorized attacker to elevate privileges local | |
CVE-2026-65781 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges lo | |
CVE-2026-65778 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges lo | |
CVE-2026-65779 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges lo | |
CVE-2026-65776 |
high | 7.0 | 0.0026 | 2026-10-29 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges local | |
CVE-2026-65774 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate p | |
CVE-2026-65773 |
high | 7.8 | 0.0030 | 2026-10-29 | Improper access control in Windows Kernel allows an authorized attacker to elevate privile | |
CVE-2026-65681 |
high | 7.5 | 0.0117 | 2026-10-29 | Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker t | |
CVE-2026-65679 |
high | 8.1 | 0.0071 | 2026-10-29 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker | |
CVE-2026-64921 |
high | 8.8 | 0.0094 | 2026-10-29 | Missing authentication for critical function in Microsoft Office SharePoint allows an auth | |
CVE-2026-64919 |
high | 7.8 | 0.0047 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to | |
CVE-2026-64920 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-64915 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to exe | |
CVE-2026-64912 |
high | 7.8 | 0.0047 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to | |
CVE-2026-64914 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-64910 |
high | 7.8 | 0.0047 | 2026-10-29 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execu | |
CVE-2026-64911 |
high | 7.8 | 0.0047 | 2026-10-29 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to exec | |
CVE-2026-64908 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-64909 |
high | 7.8 | 0.0047 | 2026-10-29 | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker | |
CVE-2026-64907 |
high | 7.8 | 0.0047 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to ex | |
CVE-2026-64905 |
high | 7.8 | 0.0047 | 2026-10-29 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code | |
CVE-2026-64906 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to e | |
CVE-2026-64903 |
high | 7.8 | 0.0047 | 2026-10-29 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to exec | |
CVE-2026-64904 |
high | 7.8 | 0.0047 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows a | |
CVE-2026-64901 |
high | 8.8 | 0.0204 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-64900 |
high | 7.3 | 0.0065 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-64898 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-63533 |
high | 7.8 | 0.0047 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-63532 |
high | 7.8 | 0.0047 | 2026-10-29 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to exec | |
CVE-2026-63526 |
high | 7.8 | 0.0047 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-63527 |
high | 7.8 | 0.0047 | 2026-10-29 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to ex | |
CVE-2026-63525 |
high | 7.8 | 0.0047 | 2026-10-29 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execu | |
CVE-2026-62911 |
high | 8.0 | 0.0069 | 2026-10-29 | 3 PoC | Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized |
CVE-2026-62888 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privil | |
CVE-2026-62885 |
high | 7.8 | 0.0033 | 2026-10-29 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate priv | |
CVE-2026-62872 |
high | 8.8 | 0.0078 | 2026-10-29 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privile | |
CVE-2026-62880 |
high | 7.8 | 0.0033 | 2026-10-29 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges loc | |
CVE-2026-62870 |
high | 8.8 | 0.0082 | 2026-10-29 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code o | |
CVE-2026-62824 |
high | 8.8 | 0.0082 | 2026-10-29 | Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to ex | |
CVE-2026-62822 |
high | 8.8 | 0.0082 | 2026-10-29 | Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute | |
CVE-2026-62823 |
high | 8.8 | 0.0053 | 2026-10-29 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execu |