Critical · CVSS 9.3
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.4
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.3
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.5
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.5
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.5
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.5
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.8
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.5
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.8
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.1
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.1
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 6.7
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 6.7
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 6.7
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 6.5
Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 6.7
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Critical · CVSS 9.8
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.3
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.1
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 6.7
Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.5
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 4.3
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 8.8
Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 5.5
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026
Medium · CVSS 4.6
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Aug 11, 2026 · Updated Oct 8, 2026
High · CVSS 7.8
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Published Aug 11, 2026 · Updated Oct 8, 2026