CVE-2026-18700 - An issue in MongoDB Server's geospatial validation could allow an authenticated user with write priv

CVE-2026-18699 - An issue in MongoDB Server's query planner could allow an authenticated user with read-level privile

CVE-2026-18698 - An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to

CVE-2026-18697 - An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a m

CVE-2026-18696 - An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-de

CVE-2026-18695 - An issue in MongoDB Server's handling of certain query predicates against time-series collections wi

CVE-2026-18694 - An issue in MongoDB Server's geospatial query processing could allow an authenticated user with writ

CVE-2026-18693 - An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user wi

CVE-2026-18692 - An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated us

CVE-2026-18691 - An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable networ

CVE-2026-18690 - An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to

CVE-2026-18688 - An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an o

CVE-2026-18687 - MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate

CVE-2026-15426 - The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugi

CVE-2026-73219 - CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0

CVE-2026-73218 - Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows a

CVE-2026-73217 - Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows a

CVE-2026-73216 - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdown_clien

CVE-2026-73215 - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnports_allo

CVE-2026-73214 - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls_server_in

CVE-2026-73213 - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addr_less_eq()

CVE-2026-73212 - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, good_peer_addr

CVE-2026-73211 - PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.upda

CVE-2026-73090 - PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, processUpdateActivity

CVE-2026-72713 - XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-regis

CVE-2026-72712 - Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote

CVE-2026-71398 - Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could resu

CVE-2026-71362 - Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privileg

CVE-2026-69113 - Cap v0.3.1 contains a broken access control vulnerability in the POST /api/video/comment endpoint th

CVE-2026-69102 - MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in appli

CVE-2026-65680 - Improper link resolution before file access ('link following') in Microsoft OneDrive allows an autho

CVE-2026-48790 - Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1

CVE-2026-48771 - ishankportfolio is a portfolio website. Prior to version 1.0.1, contact form submissions could poten

CVE-2026-48767 - TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a

CVE-2026-48494 - TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to a

CVE-2026-48447 - Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbit

CVE-2026-48441 - Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Pa

CVE-2026-48416 - Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Securi

CVE-2026-48415 - Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Securi

CVE-2026-48414 - Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused

CVE-2026-48413 - Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused

CVE-2026-48412 - Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privileg

CVE-2026-48411 - Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Securi

CVE-2026-48410 - Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-48409 - Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-48408 - Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-48407 - Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-48406 - Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-48405 - Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-48404 - Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-48397 - Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result

CVE-2026-48381 - Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in a

CVE-2026-47940 - Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result i

CVE-2026-47705 - TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result ex

CVE-2026-27302 - Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could resu

CVE-2026-20917 - Exposure of sensitive information caused by incorrect data forwarding during transient execution for

CVE-2026-20901 - Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalati

CVE-2026-20712 - Incomplete cleanup in some UEFI firmware for some Intel(R) reference platforms within UEFI may allow

CVE-2026-0465 - A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local att

CVE-2025-54512 - A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-priv

CVE-2025-0046 - Incorrect directory permissions could allow a local user to escalate their privileges, potentially r

CVE-2022-50997 - Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPer

CVE-2016-20097 - Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet

CVE-2026-73089 - Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-

CVE-2026-73088 - Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-

CVE-2026-73087 - Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SS

CVE-2026-73086 - nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.1

CVE-2026-73085 - Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck func

CVE-2026-73084 - Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect O

CVE-2026-73083 - Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONL

CVE-2026-73082 - Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/pr

CVE-2026-73081 - Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-c

CVE-2026-72971 - Improper link resolution before file access ('link following') in Windows Container Isolation FS Fil

CVE-2026-71390 - CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result

CVE-2026-71389 - CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that

CVE-2026-71387 - ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary co

CVE-2026-71386 - is affected by a Cross-site Scripting (XSS) vulnerability that could result in arbitrary code execut

CVE-2026-71384 - is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypa

CVE-2026-71383 - is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypa

CVE-2026-71331 - Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized att

CVE-2026-70355 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-70354 - Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

CVE-2026-70348 - Improper link resolution before file access ('link following') in Windows Management Services allows

CVE-2026-70347 - Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges

CVE-2026-70346 - Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges

CVE-2026-70345 - Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges

CVE-2026-70344 - Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges

CVE-2026-70340 - Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a

CVE-2026-70338 - Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthor

CVE-2026-70337 - Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code

CVE-2026-70336 - Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthoriz

CVE-2026-70335 - Improper neutralization of special elements used in an os command ('os command injection') in GitHub

CVE-2026-70330 - Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locall

CVE-2026-70329 - Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execut

CVE-2026-70328 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-70327 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-70326 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e

CVE-2026-70325 - Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose

CVE-2026-70324 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e

CVE-2026-70323 - Improper input validation in Microsoft Office allows an unauthorized attacker to disclose informatio

CVE-2026-70322 - Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose

CVE-2026-70321 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-70320 - Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose

CVE-2026-70319 - Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose infor

CVE-2026-70318 - Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose info

CVE-2026-70317 - Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose inform

CVE-2026-70316 - Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose

CVE-2026-70315 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-70314 - Improper input validation in Microsoft Office allows an unauthorized attacker to disclose informatio

CVE-2026-70313 - Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose

CVE-2026-70312 - Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose

CVE-2026-70311 - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-70310 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-70307 - Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele

CVE-2026-70306 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-70304 - Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locall

CVE-2026-70130 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-69320 - Improper neutralization of special elements used in an os command ('os command injection') in Visual

CVE-2026-69306 - Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypas

CVE-2026-69278 - Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security f

CVE-2026-69223 - Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects A

CVE-2026-68821 - Improper privilege management in Windows Package Manager allows an authorized attacker to elevate pr

CVE-2026-68820 - Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele

CVE-2026-68819 - Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over

CVE-2026-68817 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-68816 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-68815 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68814 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally

CVE-2026-68813 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-68812 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68811 - Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un

CVE-2026-68810 - Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c

CVE-2026-68809 - Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform

CVE-2026-68808 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-68807 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68806 - Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locall

CVE-2026-68805 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68804 - Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code l

CVE-2026-68803 - Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un

CVE-2026-68802 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-68801 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68800 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68799 - Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose

CVE-2026-68798 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68797 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-68796 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68795 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-68794 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68793 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally

CVE-2026-68792 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Off

CVE-2026-66810 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose info

CVE-2026-66809 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-66808 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-66807 - Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code loca

CVE-2026-66806 - Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information lo

CVE-2026-66805 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-66804 - Improper access control in Windows Cross Device Service allows an authorized attacker to elevate pri

CVE-2026-66802 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windo

CVE-2026-66799 - Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges

CVE-2026-66301 - Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) a

CVE-2026-65815 - Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attac

CVE-2026-65814 - Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate p

CVE-2026-65813 - Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to ele

CVE-2026-65811 - Improper input validation in Power BI allows an authorized attacker to execute code over a network.

CVE-2026-65810 - Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges loca

CVE-2026-65807 - Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un

CVE-2026-65806 - Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over

CVE-2026-65799 - Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges lo

CVE-2026-65798 - Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65797 - Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65796 - Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execut

CVE-2026-65795 - Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65794 - Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over

CVE-2026-65791 - Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execut

CVE-2026-65790 - Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi

CVE-2026-65789 - Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

CVE-2026-65788 - Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally

CVE-2026-65787 - Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil

CVE-2026-65786 - Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil

CVE-2026-65785 - Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny ser

CVE-2026-65784 - Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-65783 - Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-65782 - Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-65781 - Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-65780 - Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-65779 - Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-65778 - Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-65777 - Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a

CVE-2026-65776 - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-65775 - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-65774 - Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges

CVE-2026-65773 - Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locall

CVE-2026-65769 - Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unaut

CVE-2026-65768 - Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams fo

CVE-2026-65767 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Te

CVE-2026-65681 - Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny ser

CVE-2026-65679 - Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execut

CVE-2026-65678 - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-65675 - No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker t

CVE-2026-65673 - Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft En

CVE-2026-65672 - Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate pri

CVE-2026-65671 - Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate pri

CVE-2026-65665 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-65664 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-65663 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-65662 - Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.

CVE-2026-65661 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-65660 - Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an a

CVE-2026-65658 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-65657 - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-65656 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Off

CVE-2026-64922 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-64921 - Missing authentication for critical function in Microsoft Office SharePoint allows an authorized att

CVE-2026-64920 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-64919 - Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute co

CVE-2026-64917 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-64916 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-64915 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-64914 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-64912 - Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute co

CVE-2026-64911 - Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l

CVE-2026-64910 - Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo

CVE-2026-64909 - Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execut

CVE-2026-64908 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-64907 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-64906 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-64905 - Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-64904 - Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor

CVE-2026-64903 - Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l

CVE-2026-64902 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-64901 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-64900 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-64899 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-64898 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-64897 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-63533 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-63532 - Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l

CVE-2026-63531 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-63530 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-63529 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-63528 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-63527 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-63526 - Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code loca

CVE-2026-63525 - Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code lo

CVE-2026-63524 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-63522 - Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized att

CVE-2026-63521 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-63520 - Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute

CVE-2026-63519 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-63518 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code