CVE Database
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
Search and filter vulnerabilities by ID, vendor, product, severity, or description.
| CVE ID | Severity | Score | Description | Published | |
|---|---|---|---|---|---|
| CVE-2026-97738 | HIGH | 8.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-97017 | HIGH | 8.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-97016 | CRITICAL | 9.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-97014 | MEDIUM | 5.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-97012 | HIGH | 8.8 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-97011 | HIGH | 8.8 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-97010 | HIGH | 8.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-97009 | HIGH | 7.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | Oct 13, 2026 | |
| CVE-2026-97008 | HIGH | 8.8 | Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-97007 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-97005 | MEDIUM | 5.5 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-97004 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-97003 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Oct 13, 2026 | |
| CVE-2026-97001 | HIGH | 7.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Oct 13, 2026 | |
| CVE-2026-96997 | HIGH | 7.8 | Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-96996 | HIGH | 7.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Oct 13, 2026 | |
| CVE-2026-96995 | HIGH | 7.8 | Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-96857 | MEDIUM | 5.5 | Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-96856 | HIGH | 7.8 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | Oct 13, 2026 | |
| CVE-2026-96855 | MEDIUM | 5.5 | Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. | Oct 13, 2026 | |
| CVE-2026-96854 | MEDIUM | 5.5 | Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-96853 | MEDIUM | 4.7 | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | Oct 13, 2026 | |
| CVE-2026-96300 | MEDIUM | 5.9 | Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network. | Oct 13, 2026 | |
| CVE-2026-96252 | CRITICAL | 9.1 | Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | Oct 13, 2026 | |
| CVE-2026-96246 | HIGH | 7.5 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. | Oct 13, 2026 |