CVE-2026-68795 Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68795 Microsoft US
Výsledky hledání
60
CVE-2026-68794 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68794 Microsoft US
CVE-2026-68793 Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68793 Microsoft US
CVE-2026-68792 Microsoft Office Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-68792 Microsoft US
CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-65815 Microsoft US
CVE-2026-65814 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVSS 8.8 CVE-2026-65814 Microsoft US 2 zdrojů
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-65813 Microsoft US
CVE-2026-65807 Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.00 CVE-2026-65807 Microsoft US
CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-65665 Microsoft US
CVE-2026-65664 Microsoft Office Graphics Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-65664 Microsoft US
CVE-2026-65660 Microsoft SharePoint Server Spoofing Vulnerability
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-65660 Microsoft US
CVE-2026-65663 Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-65663 Microsoft US
CVE-2026-65661 Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-65661 Microsoft US
CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-65658 Microsoft US
CVE-2026-65656 Microsoft Office Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-65656 Microsoft US
CVE-2026-65657 Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-65657 Microsoft US
CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-64922 Microsoft US
CVE-2026-63521 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-63521 Microsoft US
CVE-2026-63517 Microsoft Office Graphics Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-63517 Microsoft US
CVE-2026-63515 Microsoft Office Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-63515 Microsoft US
CVE-2026-54123 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-54123 Microsoft US
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability
Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.
EPSS 0.00 CVE-2026-62915 Microsoft US
CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-62914 Microsoft US
CVE-2026-62912 Microsoft Exchange Server Denial of Service Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-62912 Microsoft US
CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-62910 Microsoft US
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
EPSS 0.02 CVSS 7.5 CVE-2026-62893 Microsoft veřejná správa US 2 zdrojů
CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62815 Microsoft US
CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62784 Microsoft US
CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVSS 8.8 CVE-2026-62735 Microsoft US 2 zdrojů
CVE-2026-62712 Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVSS 7.8 CVE-2026-62712 Microsoft US 2 zdrojů
CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-61345 Microsoft US
CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-59138 Microsoft US
CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-59136 Microsoft US
CVE-2026-59135 Microsoft Windows Search Component Information Disclosure Vulnerability
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-59135 Microsoft US
CVE-2026-59133 Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability
Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-59133 Microsoft US
CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVSS 7.8 CVE-2026-54984 Microsoft US 2 zdrojů
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-40375 Microsoft US
CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-63520 Microsoft US
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-63516 Microsoft US
CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
EPSS 0.01 CVE-2026-63512 Microsoft US
CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-63514 Microsoft US
CVE-2026-62837 Microsoft SharePoint Server Information Disclosure Vulnerability
Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-62837 Microsoft US
CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-62827 Microsoft US
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-62829 Microsoft US
CVE-2026-57105 Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-57105 Microsoft US
CVE-2026-68815 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-68815 Microsoft US
CVE-2026-64906 Microsoft Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-64906 Microsoft US
CVE-2026-62898 Microsoft QUIC Information Disclosure Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-62898 Microsoft US
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-62913 Microsoft US
CVE-2026-50523 Microsoft PowerShell Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
EPSS 0.01 CVSS 7.8 CVE-2026-50523 Microsoft US
CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
EPSS 0.00 CVE-2026-70338 Microsoft US
CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-59119 Microsoft US
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
EPSS 0.03 CVE-2026-66804 Microsoft US
CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-59124 Microsoft US
CVE-2026-65767 Microsoft Teams for Android and iOS Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.
EPSS 0.00 CVE-2026-65767 Microsoft US
CVE-2026-65769 Microsoft Teams iOS Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-65769 Microsoft US
CVE-2026-65768 Microsoft Teams Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-65768 Microsoft US
CVE-2026-63518 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-63518 Microsoft US
CVE-2026-58612 PowerShell Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-58612 Microsoft US
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-70337 Microsoft US