CVE-2026-108065 - SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Softw

CVE-2026-109245 - FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_htt

CVE-2026-96765 - The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vul

CVE-2026-104759 - The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vul

CVE-2026-62367 - Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, whe

CVE-2026-96207 - Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to eleva

CVE-2026-94510 - Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attack

CVE-2026-88131 - Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute

CVE-2026-84058 - IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Micr

CVE-2026-107782 - System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc

CVE-2026-107225 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 t

CVE-2026-107224 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 t

CVE-2026-107223 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 t

CVE-2026-107222 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 t

CVE-2026-107221 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 t

CVE-2026-107220 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 t

CVE-2026-107219 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 t

CVE-2026-107218 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1

CVE-2026-107217 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 t

CVE-2026-107216 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 t

CVE-2026-107215 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 t

CVE-2026-107214 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 t

CVE-2026-107213 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 t

CVE-2026-107212 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 t

CVE-2026-107211 - Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 t

CVE-2026-58068 - This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary

CVE-2025-64391 - This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make t

CVE-2026-104047 - A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly

CVE-2026-101207 - Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains a

CVE-2026-105793 - Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P

CVE-2026-105792 - Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P

CVE-2026-105791 - Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P

CVE-2026-105790 - Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P

CVE-2026-105789 - Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P

CVE-2026-105788 - Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P

CVE-2026-104040 - A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names co

CVE-2026-105763 - Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0,

CVE-2026-104808 - DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authen

CVE-2026-105250 - A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decode

CVE-2026-96940 - Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges

CVE-2026-93853 - Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup

CVE-2023-54400 - Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that al

CVE-2026-95394 - Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial

CVE-2026-101042 - Parse Server is an open-source backend server. In versions >= 9.0.0 < 9.10.1-alpha.10 and >= 8.0.2 <

CVE-2026-100681 - Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfilt

CVE-2026-100550 - OpenClaw (npm package 'openclaw') before 2026.8.1 contains an access-control bypass in the Microsoft

CVE-2026-100208 - Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execut

CVE-2026-84458 - Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automa

CVE-2026-63208 - Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when a Microsoft

CVE-2026-63205 - Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or

CVE-2026-70125 - Microsoft Office Outlook Remote Code Execution Vulnerability

CVE-2026-83598 - Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Ag

CVE-2026-75511 - Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu acce

CVE-2026-92254 - Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Ant

CVE-2026-88097 - Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privile

CVE-2026-69843 - Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate pri

CVE-2026-78501 - Improper neutralization of special elements used in a command ('command injection') in Microsoft 365

CVE-2026-77903 - Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate

CVE-2026-69865 - Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthori

CVE-2026-55946 - Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information ov

CVE-2026-85893 - Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privile

CVE-2026-69486 - Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe

CVE-2026-92237 - Insertion of sensitive information into log file in the slow query logging feature in Devolutions Po

CVE-2026-40058 - CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows.

CVE-2026-58201 - Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other serv

CVE-2024-58385 - Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php

CVE-2026-85892 - Concurrent execution using shared resource with improper synchronization ('race condition') in Micro

CVE-2026-10556 - Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail t

CVE-2026-77490 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed

CVE-2026-70341 - Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over

CVE-2026-85875 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-84003 - Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allow

CVE-2026-84000 - Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute

CVE-2026-83990 - Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate

CVE-2026-83951 - Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information lo

CVE-2026-83949 - Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information lo

CVE-2026-83948 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Azu

CVE-2026-81960 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-81959 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-81958 - Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose

CVE-2026-81957 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally

CVE-2026-81956 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally

CVE-2026-81955 - Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut

CVE-2026-81954 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-81953 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-81952 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-81951 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-81950 - Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-81949 - Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute

CVE-2026-81948 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-81947 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-81401 - Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un

CVE-2026-81400 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-81399 - Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information l

CVE-2026-81398 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-81397 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-81396 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-81395 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-81394 - Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel

CVE-2026-81393 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-81392 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-81391 - Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose

CVE-2026-81390 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-81389 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-81388 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-81387 - Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel

CVE-2026-81386 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-81385 - Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to e

CVE-2026-81353 - Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to ex

CVE-2026-81352 - Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to ex

CVE-2026-80097 - Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privil

CVE-2026-80091 - Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose inform

CVE-2026-80090 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-80089 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over

CVE-2026-80088 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-80087 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose informati

CVE-2026-80086 - Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform

CVE-2026-80085 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-80084 - Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose informati

CVE-2026-80082 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over

CVE-2026-80081 - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a

CVE-2026-80080 - Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-80079 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-80078 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over

CVE-2026-80076 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over

CVE-2026-80073 - Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose informati

CVE-2026-78526 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-78525 - Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a ne

CVE-2026-78524 - Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a netwo

CVE-2026-78522 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-78521 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-78520 - Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over

CVE-2026-78519 - Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute

CVE-2026-78518 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a

CVE-2026-78517 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-78515 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-78514 - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a netwo

CVE-2026-78513 - Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform

CVE-2026-78512 - Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code ov

CVE-2026-78511 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-78510 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-78509 - Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co

CVE-2026-78507 - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a netwo

CVE-2026-78506 - Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose infor

CVE-2026-78505 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over

CVE-2026-78504 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-78503 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-78502 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-78453 - Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unautho

CVE-2026-78452 - Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to di

CVE-2026-78451 - Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized att

CVE-2026-78439 - Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execu

CVE-2026-77911 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-77908 - Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an author

CVE-2026-77901 - Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code ov

CVE-2026-77898 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over

CVE-2026-77504 - Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-77493 - Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a n

CVE-2026-73016 - Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut

CVE-2026-73006 - Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execu

CVE-2026-72977 - Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform

CVE-2026-72976 - Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information lo

CVE-2026-72975 - Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform

CVE-2026-72974 - Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information o

CVE-2026-72973 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-72972 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-72956 - Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disc

CVE-2026-72938 - Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows

CVE-2026-72933 - Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker

CVE-2026-72923 - The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common s

CVE-2026-70351 - Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to

CVE-2026-70145 - Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose i

CVE-2026-69911 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-69904 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to d

CVE-2026-69824 - Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to

CVE-2026-69804 - Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorize

CVE-2026-69797 - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a

CVE-2026-69778 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-69767 - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a

CVE-2026-69764 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69759 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69742 - Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to exec

CVE-2026-69739 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over

CVE-2026-69734 - Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose

CVE-2026-69724 - Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code o

CVE-2026-69722 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69719 - Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information ov

CVE-2026-69716 - Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Of

CVE-2026-69690 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-69686 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69683 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to d

CVE-2026-69678 - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a

CVE-2026-69671 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69641 - Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileg

CVE-2026-69636 - Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Of

CVE-2026-69632 - Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVE-2026-69629 - Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co

CVE-2026-69626 - Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a

CVE-2026-69615 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-69614 - Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute co

CVE-2026-69608 - Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker t

CVE-2026-69605 - Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges loca

CVE-2026-69601 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-69600 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-69594 - Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorize

CVE-2026-69586 - Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute c

CVE-2026-69585 - Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacke

CVE-2026-69559 - Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose inf

CVE-2026-69556 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69554 - Missing authentication for critical function in Microsoft Windows Search Component allows an authori

CVE-2026-69531 - Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorize

CVE-2026-69529 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-69511 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-69507 - Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows

CVE-2026-69491 - Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execu

CVE-2026-69477 - Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code

CVE-2026-69467 - Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate

CVE-2026-69465 - Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code o

CVE-2026-69464 - Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker t

CVE-2026-69456 - Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate priv

CVE-2026-69453 - Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform

CVE-2026-69444 - Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate priv

CVE-2026-69443 - Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allo

CVE-2026-69442 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over

CVE-2026-69438 - Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to e

CVE-2026-69417 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-69409 - Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker t

CVE-2026-69408 - Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker

CVE-2026-69402 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-69386 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-69382 - Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized

CVE-2026-69380 - Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileg

CVE-2026-69378 - Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service

CVE-2026-69376 - Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l

CVE-2026-69375 - Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized a

CVE-2026-69367 - Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l

CVE-2026-69365 - Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attack

CVE-2026-69361 - Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to per

CVE-2026-69360 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-69356 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex

CVE-2026-69355 - External control of file name or path in Microsoft Exchange Server allows an authorized attacker to

CVE-2026-69345 - Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l

CVE-2026-69336 - Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil

CVE-2026-69325 - Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over

CVE-2026-69322 - Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privilege

CVE-2026-69313 - Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil

CVE-2026-69308 - Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l

CVE-2026-69305 - Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil

CVE-2026-69299 - Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges loca

CVE-2026-69294 - Generation of error message containing sensitive information in Microsoft COM for Windows allows an