Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-47636 Microsoft US
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVE-2026-44812 US
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVE-2026-44803 US
Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-42903 US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45463 Microsoft US
Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-45459 Microsoft US
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45457 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-45455 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-44822 Microsoft US
Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally.
EPSS 0.00 CVE-2026-45649 US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45645 Microsoft US
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45643 Microsoft US
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-45466 Microsoft US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45461 Microsoft US
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-45460 Microsoft US
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45458 Microsoft US
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45456 Microsoft US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-44824 Microsoft US
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-44823 Microsoft US
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-44821 Microsoft US
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-44820 Microsoft US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-44819 Microsoft US
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-44818 Microsoft US
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-44817 Microsoft US
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-45485 Microsoft US
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45486 Microsoft US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45474 Microsoft US
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45471 Microsoft US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45472 Microsoft US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45475 Microsoft US
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-45469 Microsoft US
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-45504 Microsoft US
Incorrect calculation of buffer size in Windows TCP/IP allows an authorized attacker to deny service over an adjacent network.
EPSS 0.00 CVE-2026-42915 US
Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-42910 US
Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.07 CVE-2026-42980 veřejná správa US
Advisory updated to announce new versions of Servicing Stack Updates are available. Please see the FAQ for details.
US
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-44814 US
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-45637 Microsoft US
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-45638 US
Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVSS 7.0 CVE-2026-45597 US
Use after free in Windows SDK allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVSS 7.8 CVE-2026-45593 US
Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-45592 US
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVSS 5.5 CVE-2026-48566 US
Information published.
EPSS 0.00 CVE-2026-10879 Perl US
Information published.
EPSS 0.00 CVE-2026-50265 CVE-2026-50292 US
Information published.
EPSS 0.00 CVE-2026-11463 USCiLab US
Information published.
EPSS 0.01 CVE-2026-7774 US
Information published.
EPSS 0.00 CVE-2026-3276 US
Information published.
EPSS 0.00 CVE-2026-8829 Perl US
Information published.
EPSS 0.01 CVE-2026-27145 US
Information published.
EPSS 0.00 CVE-2026-37460 FRRouting US
Information published.
EPSS 0.00 CVE-2026-10722 Cilium US
Information published.
EPSS 0.00 CVE-2026-50292 libinput US
Information published.
EPSS 0.00 CVE-2026-10275 OpenSC US
Information published.
EPSS 0.00 CVE-2026-50219 libexpat US
Information published.
EPSS 0.00 CVE-2026-50219 CVE-2026-56412 libexpat US
Information published.
EPSS 0.00 CVE-2026-50219 CVE-2026-56131 libexpat US
Information published.
EPSS 0.00 CVE-2026-42507 US
Information published.
EPSS 0.01 CVE-2026-42504 US
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-48579 Microsoft US