CVE-2026-88145: Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE archive
2026 CVE Archive
Browse CVE records published in 2026 CVE Archive, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 71916 matching CVEs · Page 1 of 1439.
CVE-2026-88150: Microsoft Office Word Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-88153: Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-85900: Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70298: Microsoft Office SharePoint Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83891: Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70300: Microsoft Office Word Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70301: Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70302: Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70291: Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70276: Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70287: Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70266: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70259: Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70263: Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70282: Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70257: Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70269: Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70251: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70206: Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70267: Microsoft Office SharePoint Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70256: Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70220: Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70268: Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70197: .NET Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70188: ASP.NET Core Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70190: .NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70183: ASP.NET Core Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70181: ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70179: ASP.NET Core Elevation of Privilege Vulnerability
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70196: ASP.NET Core Denial of Service Vulnerability
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70175: ASP.NET Core Elevation of Privilege Vulnerability
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70165: .NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70161: .NET Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70159: ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70174: .NET Remote Code Execution Vulnerability
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70186: ASP.NET Core Denial of Service Vulnerability
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70149: Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70116: Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70147: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70109: Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70092: Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70110: Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70068: Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70131: Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70044: Microsoft Windows Media Foundation Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70102: Windows Spaceport.sys Elevation of Privilege Vulnerability
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70134: Windows Event Tracing Elevation of Privilege Vulnerability
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70137: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-70045: Windows Work Folders Elevation of Privilege Vulnerability
Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026