CVE-2026-63521 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-63521 Microsoft US
Výsledky hledání
60
CVE-2026-63517 Microsoft Office Graphics Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-63517 Microsoft US
CVE-2026-63515 Microsoft Office Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-63515 Microsoft US
CVE-2026-54123 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-54123 Microsoft US
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability
Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.
EPSS 0.00 CVE-2026-62915 Microsoft US
CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-62914 Microsoft US
CVE-2026-62912 Microsoft Exchange Server Denial of Service Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-62912 Microsoft US
CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-62910 Microsoft US
CVE-2026-62909 .NET Elevation of Privilege Vulnerability
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62909 US
CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62908 US
CVE-2026-62901 .NET Denial of Service Vulnerability
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-62901 US
CVE-2026-62900 .NET Information Disclosure Vulnerability
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-62900 US
CVE-2026-62899 .NET Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-62899 US
CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62894 US
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
EPSS 0.03 CVSS 7.5 CVE-2026-62893 Microsoft veřejná správa US 2 zdrojů
CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62892 US
CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-62890 US
CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62889 US
CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62878 US
CVE-2026-62877 Windows Win32k Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62877 US
CVE-2026-62876 Windows Win32k Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62876 US
CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62820 veřejná správa US
CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
EPSS 0.01 CVE-2026-62819 US
CVE-2026-62818 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62818 US
CVE-2026-62817 Windows DNS Server Remote Code Execution Vulnerability
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
EPSS 0.01 CVE-2026-62817 veřejná správa telekomunikace US
CVE-2026-62816 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
EPSS 0.00 CVE-2026-62816 US
CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62815 Microsoft US
CVE-2026-62812 Windows DHCP Server Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62812 US
CVE-2026-62797 Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62797 US
CVE-2026-62796 Windows NTFS Information Disclosure Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-62796 US
CVE-2026-62795 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62795 veřejná správa US
CVE-2026-62798 Win32k Information Disclosure Vulnerability
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-62798 US
CVE-2026-62787 Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62787 US
CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62784 Microsoft US
CVE-2026-62792 Windows TCP/IP Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62792 US
CVE-2026-62779 Windows Schannel Elevation of Privilege Vulnerability
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62779 US
CVE-2026-62785 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62785 US
CVE-2026-62774 Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62774 US
CVE-2026-62772 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62772 US
CVE-2026-62773 Windows Kerberos Elevation of Privilege Vulnerability
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62773 US
CVE-2026-62766 Windows Kerberos Elevation of Privilege Vulnerability
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-62766 US
CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62758 US
CVE-2026-62783 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-62783 US
CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62754 US
CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.
EPSS 0.01 CVE-2026-62750 US
CVE-2026-62745 Windows DHCP Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
EPSS 0.00 CVE-2026-62745 US
CVE-2026-62742 Windows DHCP Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
EPSS 0.00 CVE-2026-62742 US
CVE-2026-62739 Windows HTTP.sys Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62739 US
CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.03 CVE-2026-62737 US
CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVSS 8.8 CVE-2026-62735 Microsoft US 2 zdrojů
CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62753 US
CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-62740 US
CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62729 US
CVE-2026-62748 Windows Telephony Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62748 US
CVE-2026-62724 Windows Telephony Service Elevation of Privilege Vulnerability
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62724 US
CVE-2026-62723 Windows Telephony Service Elevation of Privilege Vulnerability
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62723 US
CVE-2026-62719 Windows Message Queuing Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-62719 US
CVE-2026-62716 Windows DHCP Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
EPSS 0.00 CVE-2026-62716 veřejná správa US
CVE-2026-62715 Windows DHCP Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
EPSS 0.00 CVE-2026-62715 US
CVE-2026-62718 Windows DHCP Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
EPSS 0.00 CVE-2026-62718 US