CVE Database

55204+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-81952
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-81951
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81950
7.8 HIGH

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81949
7.8 HIGH

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81948
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81947
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81822
8.4 HIGH

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing …

Sep 8, 2026
CVE-2026-81821
8.4 HIGH

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information.

Sep 8, 2026
CVE-2026-81398
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81397
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81396
7.8 HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81389
7.0 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81388
7.8 HIGH

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81386
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81385
8.8 HIGH

Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-81383
7.4 HIGH

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Sep 8, 2026
CVE-2026-81379
8.2 HIGH

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Sep 8, 2026
CVE-2026-81378
8.2 HIGH

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Sep 8, 2026
CVE-2026-81357
8.2 HIGH

Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Sep 8, 2026
CVE-2026-81356
8.2 HIGH

Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Sep 8, 2026
CVE-2026-81355
7.5 HIGH

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81354
8.2 HIGH

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-81353
7.8 HIGH

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-81352
8.8 HIGH

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-81349
7.2 HIGH

Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a …

Sep 8, 2026
CVE-2026-80097
8.6 HIGH

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-80096
8.8 HIGH

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

Sep 8, 2026
CVE-2026-80093
7.0 HIGH

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-80085
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-80083
8.8 HIGH

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

Sep 8, 2026
CVE-2026-80081
8.8 HIGH

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-80080
8.8 HIGH

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-80077
8.8 HIGH

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-80075
7.8 HIGH

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-80074
8.8 HIGH

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78526
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78525
8.8 HIGH

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78524
8.8 HIGH

Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78521
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78519
8.8 HIGH

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78518
8.8 HIGH

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78517
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78514
8.8 HIGH

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78512
8.8 HIGH

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78511
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78507
8.8 HIGH

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78505
8.8 HIGH

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78504
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78464
7.0 HIGH

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-78463
8.8 HIGH

Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Sep 8, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.