CVE Database

45217+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-78524
8.8 HIGH

Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78521
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78519
8.8 HIGH

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78518
8.8 HIGH

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78517
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78514
8.8 HIGH

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78512
8.8 HIGH

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78511
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78507
8.8 HIGH

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78505
8.8 HIGH

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78504
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78464
7.0 HIGH

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-78463
8.8 HIGH

Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78462
8.8 HIGH

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Sep 8, 2026
CVE-2026-78461
7.4 HIGH

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over …

Sep 8, 2026
CVE-2026-78457
7.0 HIGH

Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-78456
8.8 HIGH

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78450
8.1 HIGH

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78449
8.1 HIGH

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78448
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-78447
7.8 HIGH

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-78444
8.1 HIGH

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78442
8.8 HIGH

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-78439
8.8 HIGH

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-77909
7.7 HIGH

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.

Sep 8, 2026
CVE-2026-77908
8.8 HIGH

Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-77907
8.8 HIGH

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-77906
8.8 HIGH

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-77905
7.0 HIGH

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-77904
7.8 HIGH

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-77901
8.8 HIGH

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-77899
7.0 HIGH

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-77898
7.5 HIGH

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-77897
7.0 HIGH

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-77895
7.5 HIGH

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-77894
7.0 HIGH

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-77893
7.5 HIGH

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-77890
7.5 HIGH

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-77889
7.5 HIGH

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-77888
7.5 HIGH

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-77886
7.5 HIGH

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-77505
8.1 HIGH

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-77504
8.8 HIGH

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Sep 8, 2026
CVE-2026-77503
8.4 HIGH

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-77502
7.5 HIGH

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-77501
7.5 HIGH

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-77500
7.8 HIGH

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Sep 8, 2026
CVE-2026-77499
7.5 HIGH

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-77498
7.5 HIGH

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Sep 8, 2026
CVE-2026-77495
8.8 HIGH

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Sep 8, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.