CVE-2026-88151 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88151 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-88145 Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88145 Microsoft US
· zachyceno
CVE-2026-88150 Microsoft Office Word Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88150 Microsoft US
· zachyceno
CVE-2026-88153 Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-88153 Microsoft US
· zachyceno
CVE-2026-85900 Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-85900 Microsoft US
· zachyceno
CVE-2026-70298 Microsoft Office SharePoint Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70298 Microsoft US
· zachyceno
CVE-2026-83891 Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83891 Microsoft US
· zachyceno
CVE-2026-70300 Microsoft Office Word Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70300 Microsoft US
· zachyceno
CVE-2026-70301 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70301 Microsoft US
· zachyceno
CVE-2026-70302 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70302 Microsoft US
· zachyceno
CVE-2026-70291 Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70291 Microsoft US
· zachyceno
CVE-2026-70276 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70276 Microsoft US
· zachyceno
CVE-2026-70287 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70287 Microsoft US
· zachyceno
CVE-2026-70266 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70266 Microsoft US
· zachyceno
CVE-2026-70259 Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70259 Microsoft US
· zachyceno
CVE-2026-70263 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70263 Microsoft US
· zachyceno
CVE-2026-70282 Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70282 Microsoft US
· zachyceno
CVE-2026-70257 Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70257 Microsoft US
· zachyceno
CVE-2026-70269 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70269 Microsoft US
· zachyceno
CVE-2026-70251 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70251 Microsoft US
· zachyceno
CVE-2026-70206 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70206 Microsoft US
· zachyceno
CVE-2026-70267 Microsoft Office SharePoint Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70267 Microsoft US
· zachyceno
CVE-2026-70256 Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70256 Microsoft US
· zachyceno
CVE-2026-70220 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-70220 Microsoft US
· zachyceno
CVE-2026-70268 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70268 Microsoft US
· zachyceno
CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70147 Microsoft US
· zachyceno
CVE-2026-70109 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70109 Microsoft US
· zachyceno
CVE-2026-70092 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70092 Microsoft US
· zachyceno
CVE-2026-70110 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70110 Microsoft US
· zachyceno
CVE-2026-70131 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-70131 Microsoft US
· zachyceno
CVE-2026-70044 Microsoft Windows Media Foundation Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-70044 Microsoft US
· zachyceno
CVE-2026-88102 Microsoft Failover Cluster Remote Code Execution Vulnerability
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88102 Microsoft US
· zachyceno
CVE-2026-85886 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.00 CVE-2026-85886 Microsoft US
· zachyceno
CVE-2026-85876 Microsoft SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-85876 Microsoft US
· zachyceno
CVE-2026-83945 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83945 Microsoft US
· zachyceno
CVE-2026-70189 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-70189 Microsoft US
· zachyceno
CVE-2026-68883 Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-68883 Microsoft US
· zachyceno
CVE-2026-87712 Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-87712 Microsoft US
· zachyceno
CVE-2026-87710 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-87710 Microsoft US
· zachyceno
CVE-2026-85329 Microsoft Account Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-85329 Microsoft US
· zachyceno
CVE-2026-70213 Microsoft Power Apps Remote Code Execution Vulnerability
Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.
EPSS 0.00 CVE-2026-70213 Microsoft US
· zachyceno
CVE-2026-70185 Microsoft PowerShell Security Feature Bypass Vulnerability
Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-70185 Microsoft US
· zachyceno
CVE-2026-70052 Microsoft PowerShell Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-70052 Microsoft US
· zachyceno
CVE-2026-69943 Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69943 Microsoft US
· zachyceno
CVE-2026-88160 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-88160 Microsoft US
· zachyceno
CVE-2026-88158 Microsoft Digest Authentication Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-88158 Microsoft US
· zachyceno
CVE-2026-88157 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-88157 Microsoft US
· zachyceno
CVE-2026-88101 Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-88101 Microsoft US
· zachyceno
CVE-2026-85881 Microsoft Office Graphics Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-85881 Microsoft US
· zachyceno
CVE-2026-85869 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-85869 Microsoft US
· zachyceno
CVE-2026-85817 Microsoft PowerShell Remote Code Execution Vulnerability
Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-85817 Microsoft US
· zachyceno
CVE-2026-85814 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-85814 Microsoft US
· zachyceno
CVE-2026-85805 Microsoft PowerShell Security Feature Bypass Vulnerability
Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-85805 Microsoft US
· zachyceno
CVE-2026-85790 Microsoft QUIC Information Disclosure Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-85790 Microsoft US
· zachyceno
CVE-2026-85338 Microsoft Graphics Component Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-85338 Microsoft US
· zachyceno
CVE-2026-83920 Windows Search Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83920 Microsoft US
· zachyceno
CVE-2026-83919 Microsoft Internet Messaging API Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.
EPSS 0.00 CVE-2026-83919 Microsoft US
· zachyceno
CVE-2026-83921 Windows Search Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83921 Microsoft US
· zachyceno
CVE-2026-83914 Microsoft XML Remote Code Execution Vulnerability
Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83914 Microsoft US
· zachyceno
CVE-2026-83871 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-83871 Microsoft US