CVE-2026-70323 Microsoft Office Information Disclosure Vulnerability
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70323 Microsoft US
Výsledky hledání
60
CVE-2026-70320 Powerpoint Information Disclosure Vulnerability
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70320 Microsoft US
CVE-2026-70319 Microsoft Office Word Information Disclosure Vulnerability
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70319 Microsoft US
CVE-2026-70325 Powerpoint Information Disclosure Vulnerability
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70325 Microsoft US
CVE-2026-70317 Microsoft Office Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70317 Microsoft US
CVE-2026-70314 Microsoft Office Information Disclosure Vulnerability
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70314 Microsoft US
CVE-2026-70318 Microsoft Excel Information Disclosure Vulnerability
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70318 Microsoft US
CVE-2026-70321 Microsoft SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70321 Microsoft US
CVE-2026-70315 Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70315 Microsoft US
CVE-2026-70316 Powerpoint Information Disclosure Vulnerability
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70316 Microsoft US
CVE-2026-70310 Microsoft Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70310 Microsoft US
CVE-2026-70313 Microsoft PowerPoint Remote Code Execution Vulnerability
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70313 Microsoft US
CVE-2026-70311 Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-70311 Microsoft US
CVE-2026-70312 Powerpoint Information Disclosure Vulnerability
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70312 Microsoft US
CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-66301 Microsoft US
CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70307 US
CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability
Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.00 CVE-2026-69306 US
CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-69278 US
CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
EPSS 0.00 CVE-2026-69320 US
CVE-2026-68819 Windows Network File System Denial of Service Vulnerability
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-68819 US
CVE-2026-68816 Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68816 Microsoft US
CVE-2026-68813 Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-68813 Microsoft US
CVE-2026-68811 Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68811 Microsoft US
CVE-2026-68810 Microsoft Excel Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68810 Microsoft US
CVE-2026-68809 Powerpoint Information Disclosure Vulnerability
Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-68809 Microsoft US
CVE-2026-68808 Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-68808 Microsoft US
CVE-2026-68806 Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68806 Microsoft US
CVE-2026-68807 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68807 Microsoft US
CVE-2026-68802 Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-68802 Microsoft US
CVE-2026-68800 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68800 Microsoft US
CVE-2026-68796 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68796 Microsoft US
CVE-2026-68795 Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68795 Microsoft US
CVE-2026-68794 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68794 Microsoft US
CVE-2026-68793 Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68793 Microsoft US
CVE-2026-68792 Microsoft Office Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-68792 Microsoft US
CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-66799 US
CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-65815 Microsoft US
CVE-2026-65814 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVSS 8.8 CVE-2026-65814 Microsoft US 2 zdrojů
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-65813 Microsoft US
CVE-2026-65811 Power BI Remote Code Execution Vulnerability
Improper input validation in Power BI allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-65811 US
CVE-2026-65807 Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.00 CVE-2026-65807 Microsoft US
CVE-2026-65788 Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-65788 US
CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-65787 US
CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-65789 US
CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-65786 US
CVE-2026-65784 Windows NTFS Information Disclosure Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-65784 US
CVE-2026-65785 Windows DHCP Client Denial of Service Vulnerability
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
EPSS 0.00 CVE-2026-65785 US
CVE-2026-65678 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-65678 US
CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability
No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.00 CVE-2026-65675 US
CVE-2026-65672 Remote Access API Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-65672 US
CVE-2026-65662 Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-65662 US
CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.03 CVE-2026-65665 Microsoft US
CVE-2026-65664 Microsoft Office Graphics Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-65664 Microsoft US
CVE-2026-65660 Microsoft SharePoint Server Spoofing Vulnerability
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-65660 Microsoft US
CVE-2026-65663 Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-65663 Microsoft US
CVE-2026-65661 Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-65661 Microsoft US
CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-65658 Microsoft US
CVE-2026-65656 Microsoft Office Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-65656 Microsoft US
CVE-2026-65657 Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-65657 Microsoft US
CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-64922 Microsoft US