Search Results (29046 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-105728 1 Microsoft 1 Dynamics Nav 2018 2026-10-14 7.5 High
Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
CVE-2026-83787 1 Microsoft 8 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 5 more 2026-10-14 5.5 Medium
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
CVE-2026-83681 1 Microsoft 1 Power Toys 2026-10-14 5.5 Medium
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.
CVE-2022-26488 3 Microsoft, Netapp, Python 4 Windows, Active Iq Unified Manager, Ontap Select Deploy Administration Utility and 1 more 2026-10-14 7.0 High
In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabled PATH entries. A non-administrative user can trigger a repair that incorrectly adds user-writable paths into PATH, enabling search-path hijacking of other users and system services. This affects Python (CPython) through 3.7.12, 3.8.x through 3.8.12, 3.9.x through 3.9.10, and 3.10.x through 3.10.2.
CVE-2026-70250 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-10-14 8.8 High
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-88190 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-14 6.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88192 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-14 6.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70082 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-10-14 7.5 High
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
CVE-2026-88195 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-14 6.5 Medium
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88201 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-14 6.5 Medium
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97003 1 Microsoft 8 365 Apps, Microsoft 365, Office 2021 and 5 more 2026-10-14 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97004 1 Microsoft 8 365 Apps, Microsoft 365, Office 2021 and 5 more 2026-10-14 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97007 1 Microsoft 8 365 Apps, Microsoft 365, Office 2021 and 5 more 2026-10-14 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97008 1 Microsoft 8 365 Apps, Microsoft 365, Office 2021 and 5 more 2026-10-14 8.8 High
Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97009 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-14 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-97010 1 Microsoft 8 365 Apps, Microsoft 365, Office 2021 and 5 more 2026-10-14 8.8 High
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97011 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-14 8.8 High
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97014 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-14 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-70217 1 Microsoft 2 Sharepoint Server, Sharepoint Server Subscription Edition 2026-10-14 4.9 Medium
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-70201 1 Microsoft 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more 2026-10-14 5.5 Medium
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.