CVE-2026-81947: Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE archive
September 2026
Browse CVE records published in September 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 14595 matching CVEs · Page 6 of 292.
CVE-2026-81386: Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-81398: Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-81385: Microsoft Office Publisher Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-81383: Visual Studio Code Information Disclosure Vulnerability
Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-81354: Windows Hello Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-81353: HEIF Image Extensions Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80096: Windows Remote Desktop Services Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80082: Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80081: Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80090: Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80089: Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80091: Microsoft Office Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80088: Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80085: Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80087: Microsoft Office Information Disclosure Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80080: Microsoft Office Word Remote Code Execution Vulnerability
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80086: Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78525: Microsoft Office Outlook Remote Code Execution Vulnerability
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80084: Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78526: Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80076: Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80078: Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78524: Microsoft Office Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78520: Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78522: Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80073: Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78521: Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-80079: Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78519: Microsoft Office Outlook Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-77481: Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-67645: Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-67624: Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78516: Windows Storage Information Disclosure Vulnerability
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78503: Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78514: Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78512: Microsoft Office Word Remote Code Execution Vulnerability
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78506: Microsoft Office Word Information Disclosure Vulnerability
Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78507: Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-67369: Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-66819: Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78464: Windows MIDI Service Module Elevation of Privileges Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-69595: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78462: Visual Studio Code Security Feature Bypass Vulnerability
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78457: Windows Security Health Service Elevation of Privilege Vulnerability
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78456: SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78454: Windows CD-ROM Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78452: Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78455: Xbox Information Disclosure Vulnerability
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
Published Sep 8, 2026 · Updated Oct 14, 2026
CVE-2026-78453: Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026