Browse CVE records published in August 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 11956 matching CVEs · Page 15 of 240.
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
Published Aug 3, 2026 · Updated Oct 8, 2026
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Published Aug 21, 2026 · Updated Oct 8, 2026
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
Published Aug 28, 2026 · Updated Oct 8, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Published Aug 28, 2026 · Updated Oct 8, 2026
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Published Aug 28, 2026 · Updated Oct 8, 2026
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Published Aug 28, 2026 · Updated Oct 8, 2026
Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Published Aug 28, 2026 · Updated Oct 8, 2026
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Published Aug 19, 2026 · Updated Oct 8, 2026
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
