CVE Database
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
| CVE ID | Severity | Score | Description | Published | |
|---|---|---|---|---|---|
| CVE-2026-88174 | HIGH | 8.1 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-88173 | HIGH | 8.1 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-88172 | MEDIUM | 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 | |
| CVE-2026-88171 | HIGH | 8.1 | Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-88169 | MEDIUM | 6.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 | |
| CVE-2026-88168 | HIGH | 7.8 | Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-88167 | MEDIUM | 6.5 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 | |
| CVE-2026-88166 | HIGH | 8.8 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-88165 | HIGH | 8.8 | Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-88163 | HIGH | 8.8 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-88162 | MEDIUM | 5.5 | Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally. | Oct 13, 2026 | |
| CVE-2026-88161 | HIGH | 7.0 | Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-88160 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-88158 | MEDIUM | 5.5 | Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-88156 | CRITICAL | 9.8 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-88155 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-88154 | MEDIUM | 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 | |
| CVE-2026-88153 | MEDIUM | 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 | |
| CVE-2026-88151 | MEDIUM | 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 | |
| CVE-2026-88150 | HIGH | 8.8 | Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-88145 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-88144 | HIGH | 8.8 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-88137 | MEDIUM | 6.5 | Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network. | Oct 13, 2026 | |
| CVE-2026-88109 | HIGH | 7.8 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-88094 | HIGH | 8.1 | Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network. | Oct 13, 2026 |