CVE-2026-88183 Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88183 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-88186 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88186 Microsoft US
· zachyceno
CVE-2026-88185 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88185 Microsoft US
· zachyceno
CVE-2026-88200 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-88200 Microsoft US
· zachyceno
CVE-2026-88166 Microsoft Office SharePoint Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88166 Microsoft US
· zachyceno
CVE-2026-88184 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88184 Microsoft US
· zachyceno
CVE-2026-88172 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88172 Microsoft US
· zachyceno
CVE-2026-88154 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88154 Microsoft US
· zachyceno
CVE-2026-88163 Microsoft Office SharePoint Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88163 Microsoft US
· zachyceno
CVE-2026-85932 Microsoft Office SharePoint Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-85932 Microsoft US
· zachyceno
CVE-2026-85340 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85340 Microsoft US
· zachyceno
CVE-2026-88144 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88144 Microsoft US
· zachyceno
CVE-2026-70242 Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-70242 Microsoft US
· zachyceno
CVE-2026-70246 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70246 Microsoft US
· zachyceno
CVE-2026-70215 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70215 Microsoft US
· zachyceno
CVE-2026-70281 Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70281 Microsoft US
· zachyceno
CVE-2026-70217 Microsoft Office SharePoint Information Disclosure Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70217 Microsoft US
· zachyceno
CVE-2026-70219 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70219 Microsoft US
· zachyceno
CVE-2026-70254 Microsoft Office Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70254 Microsoft US
· zachyceno
CVE-2026-70214 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70214 Microsoft US
· zachyceno
CVE-2026-70202 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70202 Microsoft US
· zachyceno
CVE-2026-70153 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70153 Microsoft US
· zachyceno
CVE-2026-69919 Windows Cryptographic Services Information Disclosure Vulnerability
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69919 US
· zachyceno
CVE-2026-69802 Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability
Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69802 US
· zachyceno
CVE-2026-88130 Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88130 US
· zachyceno
CVE-2026-88129 Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88129 US
· zachyceno
CVE-2026-88125 Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88125 US
· zachyceno
CVE-2026-88123 Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88123 US
· zachyceno
CVE-2026-88122 Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88122 US
· zachyceno
CVE-2026-88120 Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88120 US
· zachyceno
CVE-2026-88119 Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88119 US
· zachyceno
CVE-2026-88117 Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88117 US
· zachyceno
CVE-2026-88116 Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88116 US
· zachyceno
CVE-2026-88114 Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88114 US
· zachyceno
CVE-2026-88112 Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88112 US
· zachyceno
CVE-2026-88093 Desktop Window Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88093 US
· zachyceno
CVE-2026-88092 ASP.NET Core Tampering Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
EPSS 0.01 CVE-2026-88092 US
· zachyceno
CVE-2026-88089 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-88089 Microsoft US
· zachyceno
CVE-2026-88085 Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88085 Microsoft US
· zachyceno
CVE-2026-88088 Microsoft SQL Server Elevation of Privilege Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88088 Microsoft US
· zachyceno
CVE-2026-85919 Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85919 Microsoft US
· zachyceno
CVE-2026-88086 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.
EPSS < 0.01 CVE-2026-88086 Microsoft US
· zachyceno
CVE-2026-88084 Microsoft SQL Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88084 Microsoft US
· zachyceno
CVE-2026-85888 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-85888 Microsoft US
· zachyceno
CVE-2026-88081 Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88081 Microsoft US
· zachyceno
CVE-2026-88083 Microsoft SQL Server Remote Code Execution Vulnerability
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
EPSS < 0.01 CVE-2026-88083 Microsoft US
· zachyceno
CVE-2026-88082 Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88082 Microsoft US
· zachyceno
CVE-2026-88075 Configuration Manager Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-88075 Microsoft US
· zachyceno
CVE-2026-87696 Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS < 0.01 CVE-2026-87696 Microsoft US
· zachyceno
CVE-2026-87695 Microsoft Exchange Server Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-87695 Microsoft US
· zachyceno
CVE-2026-87692 Microsoft Exchange Server Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-87692 Microsoft US
· zachyceno
CVE-2026-85873 Skype for Business Elevation of Privilege Vulnerability
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-85873 Microsoft US
· zachyceno
CVE-2026-83746 Skype for Business Elevation of Privilege Vulnerability
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-83746 Microsoft US
· zachyceno
CVE-2026-77910 Microsoft Exchange Server Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-77910 Microsoft US
· zachyceno
CVE-2026-70571 Microsoft Exchange Server Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70571 Microsoft US
· zachyceno
CVE-2026-70297 Skype for Business Remote Code Execution Vulnerability
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70297 Microsoft US
· zachyceno
CVE-2026-70279 Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-70279 Microsoft US
· zachyceno
CVE-2026-70264 Microsoft Defender Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-70264 Microsoft US
· zachyceno
CVE-2026-70261 Microsoft Trace Data Helper Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70261 Microsoft US
· zachyceno
CVE-2026-70260 Microsoft Trace Data Helper Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70260 Microsoft US