CVE-2026-70310: Microsoft Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE archive
August 2026
Browse CVE records published in August 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 11956 matching CVEs · Page 2 of 240.
CVE-2026-66316: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Published Aug 3, 2026 · Updated Oct 8, 2026
CVE-2026-68796: Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-66315: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Published Aug 3, 2026 · Updated Oct 8, 2026
CVE-2026-69855: Microsoft Copilot in Azure Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-66314: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Published Aug 3, 2026 · Updated Oct 8, 2026
CVE-2026-69543: Azure Virtual Machines Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-66313: Microsoft Edge (Chromium-based) Tampering Vulnerability
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
Published Aug 3, 2026 · Updated Oct 8, 2026
CVE-2026-69558: Microsoft Partner Center Information Disclosure Vulnerability
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-66312: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
Published Aug 3, 2026 · Updated Oct 8, 2026
CVE-2026-69555: Azure Arc Elevation of Privilege Vulnerability
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-66310: Microsoft Edge for Android Information Disclosure Vulnerability
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
Published Aug 3, 2026 · Updated Oct 8, 2026
CVE-2026-69400: Azure Logic Apps Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-69502: Azure SQL Database Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Published Aug 21, 2026 · Updated Oct 8, 2026
CVE-2026-69419: Azure Data Manager for Energy Remote Code Execution Vulnerability
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-68782: Azure SQL Database Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-66800: Azure Data Factory Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-66309: Azure SQL Database Elevation of Privilege Vulnerability
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-65816: Azure Arc Elevation of Privilege Vulnerability
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-63509: Microsoft Fabric Elevation of Privilege Vulnerability
Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-65770: Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-62869: Azure Entra ID Spoofing Vulnerability
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-68823: Azure Confidential Ledger Remote Code Execution Vulnerability
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
CVE-2026-49163: Application Insights Profiler Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
CVE-2026-65667: Microsoft Teams Elevation of Privilege Vulnerability
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
CVE-2026-56162: Azure SQL Database Elevation of Privilege Vulnerability
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
CVE-2026-50516: Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-59118: Copilot Cowork Elevation of Privilege Vulnerability
Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
CVE-2026-56161: Azure Logic Apps Information Disclosure Vulnerability
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
CVE-2026-62830: Azure SRE Agent Elevation of Privilege Vulnerability
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
CVE-2026-62917: Microsoft SharePoint Server Spoofing Vulnerability
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-62839: Microsoft SharePoint Server Spoofing Vulnerability
Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-58639: Microsoft SharePoint Server Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-65767: Microsoft Teams for Android Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-70309: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
Published Aug 28, 2026 · Updated Oct 8, 2026
CVE-2026-72984: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Published Aug 28, 2026 · Updated Oct 8, 2026
CVE-2026-66798: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Published Aug 28, 2026 · Updated Oct 8, 2026
CVE-2026-66324: Microsoft Edge (Chromium-based) Spoofing Vulnerability
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Published Aug 28, 2026 · Updated Oct 8, 2026
CVE-2026-66323: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Published Aug 28, 2026 · Updated Oct 8, 2026
CVE-2026-70105: Microsoft Word Information Disclosure Vulnerability
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Aug 20, 2026 · Updated Oct 8, 2026
CVE-2026-62727: Windows Telephony Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Published Aug 19, 2026 · Updated Oct 8, 2026
CVE-2026-62898: Microsoft QUIC Information Disclosure Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-62738: Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-71331: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-70354: .NET Core Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-63522: Azure SQL Database Elevation of Privilege Vulnerability
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-70332: Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Published Aug 6, 2026 · Updated Oct 8, 2026
CVE-2026-70337: Microsoft PowerShell Remote Code Execution Vulnerability
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-70338: Microsoft PowerShell Security Feature Bypass Vulnerability
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
CVE-2026-70326: Microsoft SharePoint Server Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026