CVE-2026-56198 Microsoft Trace Data Helper Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-56198 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
SPOJENO PŘES CVE CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
KEV ✓ EPSS < 0.01 CVE-2026-85880 Microsoft US
· zachyceno
CVE-2026-80097 Microsoft Authenticator Elevation of Privilege Vulnerability
Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-80097 Microsoft US
· zachyceno
CVE-2026-65669 Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-65669 Microsoft US
· zachyceno
CVE-2026-73029 Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-73029 Microsoft US
· zachyceno
CVE-2026-68786 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-68786 Microsoft US
· zachyceno
CVE-2026-67643 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67643 Microsoft US
· zachyceno
CVE-2026-67636 Microsoft SQL Server Remote Code Execution Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67636 Microsoft US
· zachyceno
CVE-2026-78518 Microsoft Office Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78518 Microsoft US
· zachyceno
CVE-2026-67389 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-67389 Microsoft US
· zachyceno
CVE-2026-78509 Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78509 Microsoft US
· zachyceno
CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78517 Microsoft US
· zachyceno
CVE-2026-78504 Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78504 Microsoft US
· zachyceno
CVE-2026-78513 Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-78513 Microsoft US
· zachyceno
CVE-2026-78510 Microsoft Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS < 0.01 CVE-2026-78510 Microsoft US
· zachyceno
CVE-2026-78505 Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78505 Microsoft US
· zachyceno
CVE-2026-78515 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-78515 Microsoft US
· zachyceno
CVE-2026-78502 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-78502 Microsoft US
· zachyceno
CVE-2026-78511 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78511 Microsoft US
· zachyceno
CVE-2026-67384 Microsoft SQL Server Remote Code Execution Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67384 Microsoft US
· zachyceno
CVE-2026-67383 Microsoft SQL Server Information Disclosure Vulnerability
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-67383 Microsoft US
· zachyceno
CVE-2026-67379 Microsoft SQL Server Remote Code Execution Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67379 Microsoft US
· zachyceno
CVE-2026-67376 Microsoft SQL Server Denial of Service Vulnerability
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-67376 Microsoft US
· zachyceno
CVE-2026-67378 Microsoft SQL Server Remote Code Execution Vulnerability
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67378 Microsoft US
· zachyceno
CVE-2026-78439 Microsoft Office Graphics Component Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78439 Microsoft US
· zachyceno
CVE-2026-77908 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77908 Microsoft US
· zachyceno
CVE-2026-77898 Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77898 Microsoft US
· zachyceno
CVE-2026-69282 Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69282 Microsoft US
· zachyceno
CVE-2026-69273 Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69273 Microsoft US
· zachyceno
CVE-2026-69285 Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69285 Microsoft US
· zachyceno
CVE-2026-69268 Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69268 Microsoft US
· zachyceno
CVE-2026-77504 Microsoft Office Word Remote Code Execution Vulnerability
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77504 Microsoft US
· zachyceno
CVE-2026-77493 Windows Graphics Component Remote Code Execution Vulnerability
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77493 Microsoft US
· zachyceno
CVE-2026-69804 Microsoft Office SharePoint Remote Code Execution Vulnerability
Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69804 Microsoft US
· zachyceno
CVE-2026-69797 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69797 Microsoft US
· zachyceno
CVE-2026-69767 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69767 Microsoft US
· zachyceno
CVE-2026-69778 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69778 Microsoft US
· zachyceno
CVE-2026-69764 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69764 Microsoft US
· zachyceno
CVE-2026-69759 Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69759 Microsoft US
· zachyceno
CVE-2026-69529 Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69529 Microsoft US
· zachyceno
CVE-2026-69683 Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69683 Microsoft US
· zachyceno
CVE-2026-69739 Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69739 Microsoft US
· zachyceno
CVE-2026-69690 Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS < 0.01 CVE-2026-69690 Microsoft US
· zachyceno
CVE-2026-69719 Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69719 Microsoft US
· zachyceno
CVE-2026-69724 Microsoft Office SharePoint Remote Code Execution Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69724 Microsoft US
· zachyceno
CVE-2026-69742 Microsoft Office Publisher Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69742 Microsoft US
· zachyceno
CVE-2026-69734 Microsoft Office Word Information Disclosure Vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69734 Microsoft US
· zachyceno
CVE-2026-69716 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69716 Microsoft US
· zachyceno
CVE-2026-69722 Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69722 Microsoft US
· zachyceno
CVE-2026-69686 Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69686 Microsoft US
· zachyceno
CVE-2026-69678 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69678 Microsoft US
· zachyceno
CVE-2026-69671 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69671 Microsoft US
· zachyceno
CVE-2026-69641 Microsoft Exchange Server Elevation of Privilege Vulnerability
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69641 Microsoft US
· zachyceno
CVE-2026-69556 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69556 Microsoft US
· zachyceno
CVE-2026-69382 Microsoft Exchange Server Information Disclosure Vulnerability
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
EPSS < 0.01 CVE-2026-69382 Microsoft US
· zachyceno
CVE-2026-69380 Microsoft Exchange Server Elevation of Privilege Vulnerability
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69380 Microsoft US
· zachyceno
CVE-2026-69378 Microsoft Exchange Server Denial of Service Vulnerability
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69378 Microsoft US
· zachyceno
CVE-2026-69375 Microsoft Exchange Server Tampering Vulnerability
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.
EPSS 0.01 CVE-2026-69375 Microsoft US
· zachyceno
CVE-2026-69361 Microsoft Exchange Server Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-69361 Microsoft US
· zachyceno
CVE-2026-69356 Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-69356 Microsoft US