Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40420 |
high | 8.8 | 0.0021 | 2026-10-29 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges loc | |
CVE-2026-40419 |
high | 7.8 | 0.0031 | 2026-10-29 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges loc | |
CVE-2026-40418 |
high | 7.8 | 0.0025 | 2026-10-29 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges loc | |
CVE-2026-40417 |
high | 7.8 | 0.0027 | 2026-10-29 | Weak authentication in Dynamics Business Central allows an authorized attacker to elevate | |
CVE-2026-40416 |
medium | 4.3 | 0.0035 | 2026-10-29 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium- | |
CVE-2026-40381 |
high | 7.8 | 0.0022 | 2026-10-29 | Improper access control in Azure Connected Machine Agent allows an authorized attacker to | |
CVE-2026-40379 |
high | 7.5 | 0.0091 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an una | |
CVE-2026-40374 |
medium | 6.5 | 0.0087 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Power Automate allows an aut | |
CVE-2026-40370 |
high | 8.8 | 0.0056 | 2026-10-29 | External control of file name or path in SQL Server allows an authorized attacker to execu | |
CVE-2026-40368 |
high | 8.0 | 0.0182 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-40367 |
high | 8.4 | 0.0045 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word all | |
CVE-2026-40366 |
high | 8.4 | 0.0038 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word all | |
CVE-2026-40365 |
high | 8.8 | 0.0096 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-40364 |
high | 8.4 | 0.0442 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word all | |
CVE-2026-40363 |
high | 8.4 | 0.0038 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-40362 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code l | |
CVE-2026-40361 |
high | 8.4 | 0.0060 | 2026-10-29 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally | |
CVE-2026-40360 |
high | 7.8 | 0.0041 | 2026-10-29 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose i | |
CVE-2026-40359 |
high | 7.8 | 0.0033 | 2026-10-29 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code l | |
CVE-2026-40358 |
high | 8.4 | 0.0037 | 2026-10-29 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute | |
CVE-2026-40357 |
high | 8.8 | 0.0170 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-35440 |
medium | 5.5 | 0.0045 | 2026-10-29 | Files or directories accessible to external parties in Microsoft Office Word allows an una | |
CVE-2026-35439 |
high | 8.8 | 0.0203 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-35438 |
high | 8.3 | 0.0056 | 2026-10-29 | Missing authorization in Windows Admin Center allows an authorized attacker to elevate pri | |
CVE-2026-35436 |
high | 8.8 | 0.0022 | 2026-10-29 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges loc | |
CVE-2026-35433 |
— | — | 0.0077 | 2026-10-29 | Improper input validation in .NET allows an unauthorized attacker to elevate privileges lo | |
CVE-2026-35429 |
medium | 4.3 | 0.0050 | 2026-10-29 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium- | |
CVE-2026-35420 |
high | 7.8 | 0.0032 | 2026-10-29 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv | |
CVE-2026-34687 |
high | 7.8 | 0.0021 | 2026-10-29 | Illustrator versions 29.8.6, 30.3 and earlier are affected by a Heap-based Buffer Overflow | |
CVE-2026-34676 |
high | 7.8 | 0.0014 | 2026-10-29 | Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write v | |
CVE-2026-34675 |
high | 7.8 | 0.0014 | 2026-10-29 | Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write v | |
CVE-2026-34663 |
medium | 5.5 | 0.0017 | 2026-10-29 | Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds read vulner | |
CVE-2026-34662 |
— | — | 0.0016 | 2026-10-29 | Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference v | |
CVE-2026-34661 |
high | 7.8 | 0.0017 | 2026-10-29 | Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulne | |
CVE-2026-34644 |
high | 7.8 | 0.0017 | 2026-10-29 | After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wra | |
CVE-2026-34643 |
high | 7.8 | 0.0015 | 2026-10-29 | After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vul | |
CVE-2026-34642 |
high | 7.8 | 0.0019 | 2026-10-29 | After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overfl | |
CVE-2026-34640 |
high | 7.8 | 0.0017 | 2026-10-29 | Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an Integer Overflow or W | |
CVE-2026-34639 |
high | 7.8 | 0.0015 | 2026-10-29 | Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write v | |
CVE-2026-34638 |
high | 7.8 | 0.0018 | 2026-10-29 | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerab | |
CVE-2026-34637 |
high | 7.8 | 0.0015 | 2026-10-29 | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vu | |
CVE-2026-34636 |
high | 7.8 | 0.0015 | 2026-10-29 | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vu | |
CVE-2026-34350 |
medium | 6.5 | 0.0078 | 2026-10-29 | Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attack | |
CVE-2026-34332 |
high | 8.0 | 0.0051 | 2026-10-29 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute cod | |
CVE-2026-33833 |
high | 8.2 | 0.0050 | 2026-10-29 | Improper neutralization of special elements in output used by a downstream component ('inj | |
CVE-2026-33821 |
critical | 9.9 | 0.0066 | 2026-10-29 | Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an author | |
CVE-2026-33117 |
critical | 9.1 | 0.0048 | 2026-10-29 | The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local c | |
CVE-2026-33112 |
high | 8.8 | 0.3112 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-33110 |
high | 8.8 | 0.0197 | 2026-10-29 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized atta | |
CVE-2026-32204 |
high | 7.8 | 0.0029 | 2026-10-29 | External control of file name or path in Azure Monitor Agent allows an authorized attacker |