CVE-2026-96188
Last Modified: 13 Oct 2026External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
CVE-2026-96186
Last Modified: 18 Oct 2026Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
CVE-2026-96044
Last Modified: 16 Oct 2026No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70343
Last Modified: 13 Oct 2026Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.
CVE-2026-88207
Last Modified: 24 Oct 2026Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-85363
Last Modified: 26 Oct 2026Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70035
Last Modified: 16 Oct 2026Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.
CVE-2026-70007
Last Modified: 19 Oct 2026Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
CVE-2026-83520
Last Modified: 16 Oct 2026Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-88210
Last Modified: 24 Oct 2026Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-88206
Last Modified: 13 Oct 2026Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88203
Last Modified: 15 Oct 2026Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88195
Last Modified: 23 Oct 2026Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88190
Last Modified: 24 Oct 2026Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88192
Last Modified: 24 Oct 2026Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88183
Last Modified: 23 Oct 2026Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88186
Last Modified: 24 Oct 2026Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88185
Last Modified: 17 Oct 2026Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88200
Last Modified: 13 Oct 2026Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88166
Last Modified: 13 Oct 2026Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88184
Last Modified: 18 Oct 2026Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88172
Last Modified: 17 Oct 2026Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88154
Last Modified: 14 Oct 2026Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88163
Last Modified: 15 Oct 2026Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-85932
Last Modified: 13 Oct 2026Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-85340
Last Modified: 15 Oct 2026Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-88144
Last Modified: 18 Oct 2026Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-70242
Last Modified: 15 Oct 2026Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70246
Last Modified: 13 Oct 2026Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70215
Last Modified: 15 Oct 2026Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-70281
Last Modified: 15 Oct 2026Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-70217
Last Modified: 14 Oct 2026Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70219
Last Modified: 14 Oct 2026Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70254
Last Modified: 18 Oct 2026Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-70214
Last Modified: 14 Oct 2026Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-70202
Last Modified: 13 Oct 2026Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70153
Last Modified: 28 Oct 2026Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-69919
Last Modified: 23 Oct 2026Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
CVE-2026-69802
Last Modified: 27 Oct 2026Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.
CVE-2026-88130
Last Modified: 16 Oct 2026Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88129
Last Modified: 16 Oct 2026Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88125
Last Modified: 16 Oct 2026Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88123
Last Modified: 16 Oct 2026Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88122
Last Modified: 16 Oct 2026Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88120
Last Modified: 28 Oct 2026Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88119
Last Modified: 28 Oct 2026Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88117
Last Modified: 28 Oct 2026Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88116
Last Modified: 23 Oct 2026Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88114
Last Modified: 23 Oct 2026Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88112
Last Modified: 23 Oct 2026Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
