[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97815 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97801 | 13 Oct 2026 | CVSS 7.5 | Microsoft .NET Framework 3.5Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network. | |
| CVE-2026-97803 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 26H1Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97804 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-97805 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97806 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97807 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1809Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97808 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97790 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 11 Version 24H2Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized… | Fix |
| CVE-2026-97792 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97793 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1809Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97794 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 version 23H2Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97798 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 21H2Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to… | Fix |
| CVE-2026-97799 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 Version 24H2Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97800 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 11 Version 24H2Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-97780 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97781 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseImproper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to… | |
| CVE-2026-97782 | 13 Oct 2026 | CVSS 6.8 | Microsoft SharePoint Server Subscription EditionObservable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. | |
| CVE-2026-97783 | 13 Oct 2026 | CVSS 6.1 | Microsoft SharePoint Enterprise Server 2016Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker… | |
| CVE-2026-97787 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 version 23H2Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver… | Fix |
| CVE-2026-97788 | 13 Oct 2026 | CVSS 7.5 | Microsoft .NET Framework 3.5Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. | |
| CVE-2026-97789 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows 10 Version 1607Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97772 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseDouble free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97773 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97774 | 13 Oct 2026 | CVSS 7.0 | Microsoft 365 Apps for EnterpriseTime-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-97775 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97776 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97777 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97778 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseInteger overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97779 | 13 Oct 2026 | CVSS 6.5 | Microsoft 365 Apps for EnterpriseOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Fix |
| CVE-2026-97763 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97765 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97766 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97767 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseDouble free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97768 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97769 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97770 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseStack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97771 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97755 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97756 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97757 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97758 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97759 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97760 | 13 Oct 2026 | CVSS 6.5 | Microsoft 365 Apps for EnterpriseOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Fix |
| CVE-2026-97761 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseStack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97762 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseOut-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97747 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97748 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97749 | 13 Oct 2026 | CVSS 9.8 | Microsoft 365 Apps for EnterpriseDouble free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97750 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseStack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97751 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97752 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97753 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97754 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97739 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseInteger underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97740 | 13 Oct 2026 | CVSS 6.5 | Microsoft 365 Apps for EnterpriseExposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose… | Fix |
| CVE-2026-97741 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97742 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseStack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97743 | 13 Oct 2026 | CVSS 6.5 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | |
| CVE-2026-97744 | 13 Oct 2026 | CVSS 5.5 | Microsoft 365 Apps for EnterpriseOut-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | |
| CVE-2026-97745 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97746 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseInteger underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97010 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97011 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97012 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseStack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97014 | 13 Oct 2026 | CVSS 5.5 | Microsoft 365 Apps for EnterpriseOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | |
| CVE-2026-97016 | 13 Oct 2026 | CVSS 9.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-97017 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97738 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-96997 | 13 Oct 2026 | CVSS 7.8 | Microsoft 365 Apps for EnterpriseUse after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-97001 | 13 Oct 2026 | CVSS 7.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |
| CVE-2026-97003 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97004 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97005 | 13 Oct 2026 | CVSS 5.5 | Microsoft 365 Apps for EnterpriseOut-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | |
| CVE-2026-97007 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97008 | 13 Oct 2026 | CVSS 8.8 | Microsoft 365 Apps for EnterpriseBuffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-97009 | 13 Oct 2026 | CVSS 7.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |
| CVE-2026-96953 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. | Fix |
| CVE-2026-96957 | 13 Oct 2026 | CVSS 8.8 | Microsoft .NET 10.0 runtimeImproper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | |
| CVE-2026-96958 | 13 Oct 2026 | CVSS 7.5 | Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of ServiceInefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | Fix |
| CVE-2026-96959 | 13 Oct 2026 | CVSS 7.5 | Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of ServiceAllocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | Fix |
| CVE-2026-96960 | 13 Oct 2026 | CVSS 7.5 | Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of ServiceAsymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | Fix |
| CVE-2026-96995 | 13 Oct 2026 | CVSS 7.8 | Microsoft 365 Apps for EnterpriseStack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96996 | 13 Oct 2026 | CVSS 7.8 | Microsoft 365 Apps for EnterpriseHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |
| CVE-2026-96947 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-96948 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 10 Version 1607Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose… | Fix |
| CVE-2026-96949 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-96950 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-96951 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows Command InjectionImproper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a… | ExploitedFix |
| CVE-2026-96952 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows 10 Version 1809Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | Fix |
| CVE-2026-96938 | 13 Oct 2026 | CVSS 6.7 | Microsoft Windows 10 Version 1607Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-96939 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 11 version 23H2Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-96943 | 13 Oct 2026 | CVSS 8.8 | Microsoft Raw Image ExtensionInteger overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-96944 | 13 Oct 2026 | CVSS 5.5 | Microsoft Windows 11 Version 24H2Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose… | Fix |
| CVE-2026-96945 | 13 Oct 2026 | CVSS 7.5 | Microsoft Windows Server 2019Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. | Fix |
| CVE-2026-96946 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-96931 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-96932 | 13 Oct 2026 | CVSS 7.0 | Microsoft Windows 10 Version 1607Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized… | Fix |
| CVE-2026-96933 | 13 Oct 2026 | CVSS 7.8 | Microsoft Windows 10 Version 1607Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | Fix |
| CVE-2026-96934 | 13 Oct 2026 | CVSS 9.8 | Microsoft Windows 10 Version 1607Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | Fix |
Page 63 of 168