Export limit exceeded: 29044 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (29044 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-108458 | 1 Microsoft | 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more | 2026-10-14 | 8.8 High |
| Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105716 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-14 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105714 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-14 | 7.5 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105713 | 1 Microsoft | 1 Sharepoint Server | 2026-10-14 | 5.7 Medium |
| Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network. | ||||
| CVE-2026-105599 | 1 Microsoft | 6 365 Apps, Office 2021, Office 2024 and 3 more | 2026-10-14 | 7.5 High |
| Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105598 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-14 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105597 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-14 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105596 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-14 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105595 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-14 | 8.8 High |
| Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105593 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-14 | 8.8 High |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108457 | 1 Microsoft | 5 Windows 10 21h2, Windows 10 22h2, Windows 11 23h2 and 2 more | 2026-10-14 | 8.1 High |
| Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108400 | 1 Microsoft | 3 Hevc Video Extensions, Hevc Video Extensions For Licensed Appplications, Hevc Video Extensions From Device Manufacturer | 2026-10-14 | 8.8 High |
| Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105728 | 1 Microsoft | 1 Dynamics Nav 2018 | 2026-10-14 | 7.5 High |
| Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-83787 | 1 Microsoft | 8 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 5 more | 2026-10-14 | 5.5 Medium |
| Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. | ||||
| CVE-2026-83681 | 1 Microsoft | 1 Power Toys | 2026-10-14 | 5.5 Medium |
| Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally. | ||||
| CVE-2022-26488 | 3 Microsoft, Netapp, Python | 4 Windows, Active Iq Unified Manager, Ontap Select Deploy Administration Utility and 1 more | 2026-10-14 | 7.0 High |
| In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabled PATH entries. A non-administrative user can trigger a repair that incorrectly adds user-writable paths into PATH, enabling search-path hijacking of other users and system services. This affects Python (CPython) through 3.7.12, 3.8.x through 3.8.12, 3.9.x through 3.9.10, and 3.10.x through 3.10.2. | ||||
| CVE-2026-70250 | 1 Microsoft | 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more | 2026-10-14 | 8.8 High |
| Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network. | ||||
| CVE-2026-88190 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-14 | 6.5 Medium |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-88192 | 1 Microsoft | 7 365 Apps, Microsoft 365, Office 2021 and 4 more | 2026-10-14 | 6.5 Medium |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-70082 | 1 Microsoft | 12 Windows Server 2012, Windows Server 2012 (server Core Installation), Windows Server 2012 R2 and 9 more | 2026-10-14 | 7.5 High |
| Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network. | ||||