CVE-2026-70281 Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70281 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-70217 Microsoft Office SharePoint Information Disclosure Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70217 Microsoft US
· zachyceno
CVE-2026-70219 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70219 Microsoft US
· zachyceno
CVE-2026-70254 Microsoft Office Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70254 Microsoft US
· zachyceno
CVE-2026-70214 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70214 Microsoft US
· zachyceno
CVE-2026-70202 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70202 Microsoft US
· zachyceno
CVE-2026-70153 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70153 Microsoft US
· zachyceno
CVE-2026-69919 Windows Cryptographic Services Information Disclosure Vulnerability
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69919 US
· zachyceno
CVE-2026-69802 Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability
Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69802 US
· zachyceno
CVE-2026-88130 Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88130 US
· zachyceno
CVE-2026-88129 Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88129 US
· zachyceno
CVE-2026-88125 Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88125 US
· zachyceno
CVE-2026-88123 Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88123 US
· zachyceno
CVE-2026-88122 Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88122 US
· zachyceno
CVE-2026-88120 Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88120 US
· zachyceno
CVE-2026-88119 Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88119 US
· zachyceno
CVE-2026-88117 Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88117 US
· zachyceno
CVE-2026-88116 Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88116 US
· zachyceno
CVE-2026-88114 Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88114 US
· zachyceno
CVE-2026-88112 Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88112 US
· zachyceno
CVE-2026-88093 Desktop Window Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88093 US
· zachyceno
CVE-2026-88092 ASP.NET Core Tampering Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
EPSS 0.01 CVE-2026-88092 US
· zachyceno
CVE-2026-88089 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-88089 Microsoft US
· zachyceno
CVE-2026-88085 Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88085 Microsoft US
· zachyceno
CVE-2026-88088 Microsoft SQL Server Elevation of Privilege Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88088 Microsoft US
· zachyceno
CVE-2026-85919 Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85919 Microsoft US
· zachyceno
CVE-2026-88086 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.
EPSS < 0.01 CVE-2026-88086 Microsoft US
· zachyceno
CVE-2026-88084 Microsoft SQL Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88084 Microsoft US
· zachyceno
CVE-2026-85888 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-85888 Microsoft US
· zachyceno
CVE-2026-88081 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88081 Microsoft US
· zachyceno
CVE-2026-88083 Microsoft SQL Server Remote Code Execution Vulnerability
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
EPSS < 0.01 CVE-2026-88083 Microsoft US
· zachyceno
CVE-2026-88082 Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88082 Microsoft US
· zachyceno
CVE-2026-88075 Configuration Manager Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-88075 Microsoft US
· zachyceno
CVE-2026-87696 Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS < 0.01 CVE-2026-87696 Microsoft US
· zachyceno
CVE-2026-87695 Microsoft Exchange Server Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87695 Microsoft US
· zachyceno
CVE-2026-87692 Microsoft Exchange Server Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-87692 Microsoft US
· zachyceno
CVE-2026-85873 Skype for Business Elevation of Privilege Vulnerability
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-85873 Microsoft US
· zachyceno
CVE-2026-83746 Skype for Business Elevation of Privilege Vulnerability
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-83746 Microsoft US
· zachyceno
CVE-2026-77910 Microsoft Exchange Server Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-77910 Microsoft US
· zachyceno
CVE-2026-70571 Microsoft Exchange Server Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70571 Microsoft US
· zachyceno
CVE-2026-70297 Skype for Business Remote Code Execution Vulnerability
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70297 Microsoft US
· zachyceno
CVE-2026-70279 Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-70279 Microsoft US
· zachyceno
CVE-2026-70264 Microsoft Defender Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70264 Microsoft US
· zachyceno
CVE-2026-70261 Microsoft Trace Data Helper Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70261 Microsoft US
· zachyceno
CVE-2026-70260 Microsoft Trace Data Helper Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70260 Microsoft US
· zachyceno
CVE-2026-70250 Windows DHCP Client Remote Code Execution Vulnerability
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
EPSS < 0.01 CVE-2026-70250 US
· zachyceno
CVE-2026-70229 Windows Active Directory Domain Services Remote Code Execution Vulnerability
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70229 US
· zachyceno
CVE-2026-70228 Desktop Window Manager Elevation of Privilege Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70228 US
· zachyceno
CVE-2026-70227 Windows Device Association Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70227 US
· zachyceno
CVE-2026-70184 Windows Backup Engine Elevation of Privilege Vulnerability
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70184 US
· zachyceno
CVE-2026-70111 Windows Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70111 US
· zachyceno
CVE-2026-85925 Azure Key Vault Client SDK Elevation of Privilege Vulnerability
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-85925 US
· zachyceno
CVE-2026-85922 Azure Key Vault Security Feature Bypass Vulnerability
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-85922 US
· zachyceno
CVE-2026-70160 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70160 US
· zachyceno
CVE-2026-70158 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
EPSS 0.01 CVE-2026-70158 US
· zachyceno
CVE-2026-70148 Windows Broadcast DVR User Service Information Disclosure Vulnerability
Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70148 US
· zachyceno
CVE-2026-70143 Windows Network File System Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-70143 US
· zachyceno
CVE-2026-70122 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70122 US
· zachyceno
CVE-2026-70112 Windows Spaceport.sys Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-70112 US
· zachyceno
CVE-2026-70084 Windows Projected File System Information Disclosure Vulnerability
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70084 US