CVE-2026-78525 Microsoft Office Outlook Remote Code Execution Vulnerability
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78525 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-80084 Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-80084 Microsoft US
· zachyceno
CVE-2026-78526 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78526 Microsoft US
· zachyceno
CVE-2026-80076 Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-80076 Microsoft US
· zachyceno
CVE-2026-80078 Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-80078 Microsoft US
· zachyceno
CVE-2026-78524 Microsoft Office Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78524 Microsoft US
· zachyceno
CVE-2026-78520 Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78520 Microsoft US
· zachyceno
CVE-2026-78522 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-78522 Microsoft US
· zachyceno
CVE-2026-80073 Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-80073 Microsoft US
· zachyceno
CVE-2026-78521 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78521 Microsoft US
· zachyceno
CVE-2026-80079 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-80079 Microsoft US
· zachyceno
CVE-2026-78519 Microsoft Office Outlook Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78519 Microsoft US
· zachyceno
CVE-2026-77481 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77481 Microsoft US
· zachyceno
CVE-2026-67645 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-67645 Microsoft US
· zachyceno
CVE-2026-67624 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-67624 Microsoft US
· zachyceno
CVE-2026-78503 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-78503 Microsoft US
· zachyceno
CVE-2026-78514 Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78514 Microsoft US
· zachyceno
CVE-2026-78512 Microsoft Office Word Remote Code Execution Vulnerability
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78512 Microsoft US
· zachyceno
CVE-2026-78506 Microsoft Office Word Information Disclosure Vulnerability
Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-78506 Microsoft US
· zachyceno
CVE-2026-78507 Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78507 Microsoft US
· zachyceno
CVE-2026-67369 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-67369 Microsoft US
· zachyceno
CVE-2026-66819 Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-66819 Microsoft US
· zachyceno
CVE-2026-78452 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
EPSS < 0.01 CVE-2026-78452 Microsoft US
· zachyceno
CVE-2026-78453 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-78453 Microsoft US
· zachyceno
CVE-2026-78451 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS < 0.01 CVE-2026-78451 Microsoft US
· zachyceno
CVE-2026-78444 Microsoft Failover Cluster Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78444 Microsoft US
· zachyceno
CVE-2026-69562 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69562 Microsoft US
· zachyceno
CVE-2026-77911 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-77911 Microsoft US
· zachyceno
CVE-2026-77901 Microsoft Office Word Remote Code Execution Vulnerability
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77901 Microsoft US
· zachyceno
CVE-2026-77488 Microsoft SQL Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-77488 Microsoft US
· zachyceno
CVE-2026-77486 Microsoft SQL Server Remote Code Execution Vulnerability
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77486 Microsoft US
· zachyceno
CVE-2026-77484 Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-77484 Microsoft US
· zachyceno
CVE-2026-73016 DirectWrite Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-73016 Microsoft US
· zachyceno
CVE-2026-73010 Microsoft Failover Cluster Remote Code Execution Vulnerability
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-73010 Microsoft US
· zachyceno
CVE-2026-73006 DirectWrite Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-73006 Microsoft US
· zachyceno
CVE-2026-69465 Microsoft Office SharePoint Remote Code Execution Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69465 Microsoft US
· zachyceno
CVE-2026-65812 Microsoft Teams for Android Information Disclosure Vulnerability
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-65812 Microsoft US
· zachyceno
CVE-2026-65772 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-65772 Microsoft US
· zachyceno
CVE-2026-72976 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-72976 Microsoft US
· zachyceno
CVE-2026-72975 Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-72975 Microsoft US
· zachyceno
CVE-2026-72977 Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-72977 Microsoft US
· zachyceno
CVE-2026-72974 Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-72974 Microsoft US
· zachyceno
CVE-2026-72973 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-72973 Microsoft US
· zachyceno
CVE-2026-72938 Microsoft Office PowerPoint Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-72938 Microsoft US
· zachyceno
CVE-2026-72972 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-72972 Microsoft US
· zachyceno
CVE-2026-72956 Microsoft Office PowerPoint Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-72956 Microsoft US
· zachyceno
CVE-2026-69904 Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69904 Microsoft US
· zachyceno
CVE-2026-69632 Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69632 Microsoft US
· zachyceno
CVE-2026-69626 Microsoft Office Information Disclosure Vulnerability
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69626 Microsoft US
· zachyceno
CVE-2026-69477 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-69477 Microsoft US
· zachyceno
CVE-2026-69629 Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69629 Microsoft US
· zachyceno
CVE-2026-69636 Microsoft Office SharePoint Information Disclosure Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69636 Microsoft US
· zachyceno
CVE-2026-69614 Microsoft Office Access Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69614 Microsoft US
· zachyceno
CVE-2026-69464 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69464 Microsoft US
· zachyceno
CVE-2026-69615 Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS < 0.01 CVE-2026-69615 Microsoft US
· zachyceno
CVE-2026-69442 Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69442 Microsoft US
· zachyceno
CVE-2026-69601 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69601 Microsoft US
· zachyceno
CVE-2026-69559 Microsoft Teams for Android Information Disclosure Vulnerability
Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
EPSS < 0.01 CVE-2026-69559 Microsoft US
· zachyceno
CVE-2026-69417 Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS < 0.01 CVE-2026-69417 Microsoft US
· zachyceno
CVE-2026-69409 Microsoft Office SharePoint Information Disclosure Vulnerability
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69409 Microsoft US