CVE-2026-88183 Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88183 Microsoft US
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88183 Microsoft US
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88186 Microsoft US
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88185 Microsoft US
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-88200 Microsoft US
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88166 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88184 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88172 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88154 Microsoft US
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88163 Microsoft US
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-85932 Microsoft US
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-85340 Microsoft US
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88144 Microsoft US
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-70242 Microsoft US
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70246 Microsoft US
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70215 Microsoft US
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70281 Microsoft US
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70217 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70219 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70254 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70214 Microsoft US
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70202 Microsoft US
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70153 Microsoft US
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-88089 Microsoft US
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-88085 Microsoft US
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-88088 Microsoft US
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-85919 Microsoft US
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.
EPSS 0.00 CVE-2026-88086 Microsoft US
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-88084 Microsoft US
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-85888 Microsoft US
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88081 Microsoft US
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
EPSS 0.00 CVE-2026-88083 Microsoft US
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-88082 Microsoft US
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-88075 Microsoft US
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.00 CVE-2026-87696 Microsoft US
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-87695 Microsoft US
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-87692 Microsoft US
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-85873 Microsoft US
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-83746 Microsoft US
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-77910 Microsoft US
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70571 Microsoft US
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70297 Microsoft US
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-70279 Microsoft US
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-70264 Microsoft US
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70261 Microsoft US
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70260 Microsoft US
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-88193 Microsoft US
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-88191 Microsoft US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-88182 Microsoft US
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-88109 Microsoft US
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83935 Microsoft US
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83923 Microsoft US
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83850 Microsoft US
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83829 Microsoft US
Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83778 Microsoft US
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83725 Microsoft US
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-83686 Microsoft US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83574 Microsoft US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83570 Microsoft US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83564 Microsoft US
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83517 Microsoft US