CVE-2026-62316 - Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior t

CVE-2026-63466 - Unleash is an open-source feature management platform. Prior to 8.0.3, FeatureEventFormatterMd.forma

CVE-2026-63004 - Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the addon a

CVE-2026-72846 - Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendW

CVE-2026-70105 - Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose infor

CVE-2026-69836 - Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute c

CVE-2026-69558 - Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized

CVE-2026-65801 - Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to e

CVE-2026-63509 - Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over

CVE-2026-53958 - 4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an au

CVE-2026-50191 - 4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerabl

CVE-2026-60998 - Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (componen

CVE-2026-24301 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Cop

CVE-2026-74801 - SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-lin

CVE-2026-69414 - Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Micros

CVE-2026-50523 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Pow

CVE-2026-72970 - Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe

CVE-2024-58374 - Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet en

CVE-2026-73297 - Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior t

CVE-2026-73296 - Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior t

CVE-2026-64955 - When Microsoft Excel imports a CSV file, it executes cells beginning with certain characters as form

CVE-2026-70339 - Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all

CVE-2026-73217 - Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows a

CVE-2026-65680 - Improper link resolution before file access ('link following') in Microsoft OneDrive allows an autho

CVE-2026-47705 - TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result ex

CVE-2022-50997 - Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPer

CVE-2026-70355 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-70338 - Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthor

CVE-2026-70337 - Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code

CVE-2026-70329 - Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execut

CVE-2026-70328 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-70327 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-70326 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e

CVE-2026-70325 - Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose

CVE-2026-70324 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e

CVE-2026-70323 - Improper input validation in Microsoft Office allows an unauthorized attacker to disclose informatio

CVE-2026-70322 - Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose

CVE-2026-70321 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-70320 - Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose

CVE-2026-70319 - Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose infor

CVE-2026-70318 - Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose info

CVE-2026-70317 - Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose inform

CVE-2026-70316 - Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose

CVE-2026-70315 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-70314 - Improper input validation in Microsoft Office allows an unauthorized attacker to disclose informatio

CVE-2026-70313 - Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose

CVE-2026-70312 - Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose

CVE-2026-70311 - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-70310 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-70306 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-70130 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-68817 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-68816 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-68815 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68814 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally

CVE-2026-68813 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-68812 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68811 - Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un

CVE-2026-68810 - Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c

CVE-2026-68809 - Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform

CVE-2026-68808 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-68807 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68806 - Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locall

CVE-2026-68805 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68804 - Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code l

CVE-2026-68803 - Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un

CVE-2026-68802 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-68801 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68800 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68799 - Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose

CVE-2026-68798 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68797 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-68796 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68795 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-68794 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-68793 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally

CVE-2026-68792 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Off

CVE-2026-66810 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose info

CVE-2026-66809 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-66808 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-66807 - Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code loca

CVE-2026-66806 - Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information lo

CVE-2026-66805 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-66301 - Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) a

CVE-2026-65815 - Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attac

CVE-2026-65813 - Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to ele

CVE-2026-65807 - Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un

CVE-2026-65769 - Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unaut

CVE-2026-65768 - Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams fo

CVE-2026-65767 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Te

CVE-2026-65673 - Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft En

CVE-2026-65665 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-65664 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-65663 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-65661 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-65660 - Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an a

CVE-2026-65658 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-65657 - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-65656 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Off

CVE-2026-64922 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-64921 - Missing authentication for critical function in Microsoft Office SharePoint allows an authorized att

CVE-2026-64920 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-64919 - Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute co

CVE-2026-64917 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-64916 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-64915 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-64914 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-64912 - Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute co

CVE-2026-64911 - Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l

CVE-2026-64910 - Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo

CVE-2026-64909 - Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execut

CVE-2026-64908 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-64907 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-64906 - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod

CVE-2026-64905 - Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-64904 - Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor

CVE-2026-64903 - Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l

CVE-2026-64902 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-64901 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-64900 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-64899 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-64898 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-64897 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-63533 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-63532 - Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l

CVE-2026-63531 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-63530 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-63529 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-63528 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-63527 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-63526 - Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code loca

CVE-2026-63525 - Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code lo

CVE-2026-63524 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-63521 - Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information

CVE-2026-63520 - Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute

CVE-2026-63519 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-63518 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-63517 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-63516 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to pe

CVE-2026-63515 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-63514 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-63513 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-63512 - Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tamp

CVE-2026-62917 - Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform sp

CVE-2026-62915 - Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a securit

CVE-2026-62914 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex

CVE-2026-62913 - Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute cod

CVE-2026-62912 - Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny

CVE-2026-62911 - Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker t

CVE-2026-62910 - Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows

CVE-2026-62898 - Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a netw

CVE-2026-62882 - Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to

CVE-2026-62842 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-62839 - Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to

CVE-2026-62837 - Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose inf

CVE-2026-62829 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-62827 - Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate priv

CVE-2026-62815 - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

CVE-2026-62784 - Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorize

CVE-2026-62698 - Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate

CVE-2026-61345 - Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny

CVE-2026-59138 - Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny

CVE-2026-59136 - Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose

CVE-2026-59135 - Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose

CVE-2026-59133 - Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an a

CVE-2026-59124 - Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unaut

CVE-2026-59119 - Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privi

CVE-2026-58651 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-58639 - Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to p

CVE-2026-58612 - Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to d

CVE-2026-57105 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-54123 - Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows

CVE-2026-70332 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-65668 - Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate pri

CVE-2026-65667 - Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over

CVE-2026-63508 - Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthori

CVE-2026-62918 - Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker

CVE-2026-62896 - Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over

CVE-2026-62873 - Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorize

CVE-2026-59115 - '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to el

CVE-2026-18485 - There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver.

CVE-2026-66326 - Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute

CVE-2026-66325 - Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacke

CVE-2026-66322 - Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor

CVE-2026-66321 - Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all

CVE-2026-66318 - Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclo

CVE-2026-66317 - Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor

CVE-2026-66316 - Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor

CVE-2026-66315 - Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov

CVE-2026-66314 - Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unaut

CVE-2026-66313 - Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor

CVE-2026-66312 - Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code ov

CVE-2026-66311 - Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform

CVE-2026-66310 - External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker

CVE-2026-65804 - Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows

CVE-2026-65802 - External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker

CVE-2026-62870 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw

CVE-2026-18215 - Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a s

CVE-2026-15929 - Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i

CVE-2026-62828 - Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform t

CVE-2026-57990 - Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an una

CVE-2026-57989 - Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclo

CVE-2026-57978 - Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor

CVE-2026-56191 - Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tamp

CVE-2026-56165 - Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over

CVE-2026-54120 - Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a

CVE-2026-49159 - Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized a

CVE-2026-46671 - Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to versi

CVE-2026-57980 - Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows a

CVE-2026-21770 - HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which coul

CVE-2026-62826 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-59864 - Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, `kiota plugin add`

CVE-2026-55440 - Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior t

CVE-2026-54568 - Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3.

CVE-2026-61371 - Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix,

CVE-2026-47301 - Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate

CVE-2026-58617 - Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate

CVE-2026-58537 - Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to el

CVE-2026-58534 - Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to e

CVE-2026-58277 - Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privi

CVE-2026-57094 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-57090 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-57087 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-57083 - Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to

CVE-2026-56642 - Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to exec

CVE-2026-56195 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-56192 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-56189 - Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to

CVE-2026-56178 - Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an autho

CVE-2026-56157 - Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoo

CVE-2026-56156 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-55949 - Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute c

CVE-2026-55947 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-55944 - Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execu

CVE-2026-55898 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-55142 - Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose inform

CVE-2026-55141 - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod

CVE-2026-55140 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-55139 - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local

CVE-2026-55138 - Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose

CVE-2026-55137 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-55136 - Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c

CVE-2026-55135 - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

CVE-2026-55134 - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-55133 - Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute co

CVE-2026-55132 - Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-55131 - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

CVE-2026-55130 - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code

CVE-2026-55129 - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local

CVE-2026-55128 - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.