Browse CVE records published in 2026 CVE Archive, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 72166 matching CVEs · Page 5 of 1444.
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
Published Sep 8, 2026 · Updated Oct 14, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Published Sep 8, 2026 · Updated Oct 14, 2026
