CVE Feed

    Dashboard / CVE

    8.8
    High

    CVE-2026-97745

    Last Modified: 16 Oct 2026

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97768

    Last Modified: 16 Oct 2026

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97772

    Last Modified: 18 Oct 2026

    Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97775

    Last Modified: 20 Oct 2026

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97763

    Last Modified: 20 Oct 2026

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97741

    Last Modified: 24 Oct 2026

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97004

    Last Modified: 23 Oct 2026

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97746

    Last Modified: 16 Oct 2026

    Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-97760

    Last Modified: 24 Oct 2026

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97742

    Last Modified: 16 Oct 2026

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97738

    Last Modified: 16 Oct 2026

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97757

    Last Modified: 16 Oct 2026

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97011

    Last Modified: 14 Oct 2026

    Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97762

    Last Modified: 16 Oct 2026

    Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97777

    Last Modified: 20 Oct 2026

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-97743

    Last Modified: 16 Oct 2026

    Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97010

    Last Modified: 16 Oct 2026

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97773

    Last Modified: 20 Oct 2026

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97769

    Last Modified: 16 Oct 2026

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97008

    Last Modified: 16 Oct 2026

    Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97756

    Last Modified: 24 Oct 2026

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-97779

    Last Modified: 20 Oct 2026

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97007

    Last Modified: 24 Oct 2026

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-97748

    Last Modified: 16 Oct 2026

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-96960

    Last Modified: 16 Oct 2026

    Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-96959

    Last Modified: 16 Oct 2026

    Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-96958

    Last Modified: 16 Oct 2026

    Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

    Published: 13 Oct 2026
    7
    High

    CVE-2026-95943

    Last Modified: 29 Oct 2026

    Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-96952

    Last Modified: 16 Oct 2026

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-96953

    Last Modified: 17 Oct 2026

    Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-96951

    Last Modified: 29 Oct 2026

    Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-96950

    Last Modified: 16 Oct 2026

    Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7
    High

    CVE-2026-96949

    Last Modified: 16 Oct 2026

    Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-96948

    Last Modified: 16 Oct 2026

    Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-96947

    Last Modified: 16 Oct 2026

    Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-96946

    Last Modified: 16 Oct 2026

    Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-96945

    Last Modified: 16 Oct 2026

    Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-96944

    Last Modified: 24 Oct 2026

    Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-96202

    Last Modified: 29 Oct 2026

    Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.1
    High

    CVE-2026-88094

    Last Modified: 3 Nov 2026

    Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.

    Published: 13 Oct 2026
    7
    High

    CVE-2026-96939

    Last Modified: 16 Oct 2026

    Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    6.7
    Medium

    CVE-2026-96938

    Last Modified: 17 Oct 2026

    Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7
    High

    CVE-2026-96937

    Last Modified: 16 Oct 2026

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    4.7
    Medium

    CVE-2026-85866

    Last Modified: 29 Oct 2026

    Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-69675

    Last Modified: 2 Nov 2026

    Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-96926

    Last Modified: 17 Oct 2026

    Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-96929

    Last Modified: 17 Oct 2026

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-96931

    Last Modified: 20 Oct 2026

    Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7
    High

    CVE-2026-96932

    Last Modified: 16 Oct 2026

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    9.8
    Critical

    CVE-2026-96934

    Last Modified: 16 Oct 2026

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026