CVE-2026-105013 Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105013 Microsoft US
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105013 Microsoft US
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application. The update addresses the vulnerability by correcting how the .NET web application handles web requests.
EPSS 0.01 CVE-2026-70162 Microsoft US
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-105010 Microsoft US
Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-103577 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69922 Microsoft US
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVE-2026-100215 Microsoft US
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-102209 Microsoft US
Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-102204 Microsoft US
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-102201 Microsoft US
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-102199 Microsoft US
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100219 Microsoft US
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-100214 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100212 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100210 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100209 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-100211 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97745 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97768 Microsoft US
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97772 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97775 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97763 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97741 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97004 Microsoft US
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97746 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97760 Microsoft US
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97742 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97738 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97757 Microsoft US
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97011 Microsoft US
Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97762 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97777 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97743 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97010 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97773 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97769 Microsoft US
Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97008 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97756 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-97779 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97007 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97748 Microsoft US
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96952 Microsoft US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-96937 Microsoft US
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-96910 Microsoft US
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.01 CVE-2026-96911 Microsoft US
Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.
EPSS 0.01 CVE-2026-96844 Microsoft US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-96324 Microsoft US
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-96303 Microsoft US
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-96251 Microsoft US
External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-96188 Microsoft US
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-96186 Microsoft US
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-96044 Microsoft US
Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70343 Microsoft US
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-94520 Microsoft US
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88207 Microsoft US
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-88210 Microsoft US
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-88206 Microsoft US
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88203 Microsoft US
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88195 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88190 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88192 Microsoft US