CVE Feed

    Dashboard / CVE

    7.3
    High

    CVE-2026-96188

    Last Modified: 13 Oct 2026

    External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-96186

    Last Modified: 18 Oct 2026

    Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-96044

    Last Modified: 16 Oct 2026

    No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-70343

    Last Modified: 13 Oct 2026

    Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-88207

    Last Modified: 24 Oct 2026

    Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-85363

    Last Modified: 26 Oct 2026

    Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-70035

    Last Modified: 16 Oct 2026

    Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-70007

    Last Modified: 19 Oct 2026

    Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-83520

    Last Modified: 16 Oct 2026

    Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-88210

    Last Modified: 24 Oct 2026

    Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-88206

    Last Modified: 13 Oct 2026

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88203

    Last Modified: 15 Oct 2026

    Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88195

    Last Modified: 23 Oct 2026

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88190

    Last Modified: 24 Oct 2026

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88192

    Last Modified: 24 Oct 2026

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88183

    Last Modified: 23 Oct 2026

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-88186

    Last Modified: 24 Oct 2026

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.1
    High

    CVE-2026-88185

    Last Modified: 17 Oct 2026

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-88200

    Last Modified: 13 Oct 2026

    Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-88166

    Last Modified: 13 Oct 2026

    Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88184

    Last Modified: 18 Oct 2026

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88172

    Last Modified: 17 Oct 2026

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88154

    Last Modified: 14 Oct 2026

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-88163

    Last Modified: 15 Oct 2026

    Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-85932

    Last Modified: 13 Oct 2026

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    7.8
    High

    CVE-2026-85340

    Last Modified: 15 Oct 2026

    Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-88144

    Last Modified: 18 Oct 2026

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    9.8
    Critical

    CVE-2026-70242

    Last Modified: 15 Oct 2026

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-70246

    Last Modified: 13 Oct 2026

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-70215

    Last Modified: 15 Oct 2026

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-70281

    Last Modified: 15 Oct 2026

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    4.9
    Medium

    CVE-2026-70217

    Last Modified: 14 Oct 2026

    Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-70219

    Last Modified: 14 Oct 2026

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-70254

    Last Modified: 18 Oct 2026

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-70214

    Last Modified: 14 Oct 2026

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

    Published: 13 Oct 2026
    7.5
    High

    CVE-2026-70202

    Last Modified: 13 Oct 2026

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

    Published: 13 Oct 2026
    9.8
    Critical

    CVE-2026-70153

    Last Modified: 28 Oct 2026

    Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    5.5
    Medium

    CVE-2026-69919

    Last Modified: 23 Oct 2026

    Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

    Published: 13 Oct 2026
    8.1
    High

    CVE-2026-69802

    Last Modified: 27 Oct 2026

    Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88130

    Last Modified: 16 Oct 2026

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88129

    Last Modified: 16 Oct 2026

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88125

    Last Modified: 16 Oct 2026

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88123

    Last Modified: 16 Oct 2026

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Published: 13 Oct 2026
    6.5
    Medium

    CVE-2026-88122

    Last Modified: 16 Oct 2026

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

    Published: 13 Oct 2026
    8.1
    High

    CVE-2026-88120

    Last Modified: 28 Oct 2026

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.1
    High

    CVE-2026-88119

    Last Modified: 28 Oct 2026

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.1
    High

    CVE-2026-88117

    Last Modified: 28 Oct 2026

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-88116

    Last Modified: 23 Oct 2026

    Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-88114

    Last Modified: 23 Oct 2026

    Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026
    8.8
    High

    CVE-2026-88112

    Last Modified: 23 Oct 2026

    Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

    Published: 13 Oct 2026