CVE Database

160723+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-111297
8.0 HIGH

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Nov 10, 2026
CVE-2026-111296
8.0 HIGH

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-111295
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-111294
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-111293
6.5 MEDIUM

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

Nov 10, 2026
CVE-2026-111292
6.5 MEDIUM

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Nov 10, 2026
CVE-2026-111291
6.5 MEDIUM

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

Nov 10, 2026
CVE-2026-111290
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-111289
8.8 HIGH

Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-111288
6.5 MEDIUM

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Nov 10, 2026
CVE-2026-111287
7.5 HIGH

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-111286
7.5 HIGH

Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-111285
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110068
8.8 HIGH

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110067
8.8 HIGH

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110066
6.5 MEDIUM

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Nov 10, 2026
CVE-2026-110065
7.3 HIGH

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Nov 10, 2026
CVE-2026-110064
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110062
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110061
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110060
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110059
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110058
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110057
6.5 MEDIUM

Authorization bypass through user-controlled key in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Nov 10, 2026
CVE-2026-110056
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Nov 10, 2026
CVE-2026-110055
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110054
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110053
7.5 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110052
7.5 HIGH

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110051
6.5 MEDIUM

Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Nov 10, 2026
CVE-2026-110050
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110049
7.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Nov 10, 2026
CVE-2026-110048
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110047
8.8 HIGH

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110046
6.5 MEDIUM

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Nov 10, 2026
CVE-2026-110045
7.3 HIGH

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Nov 10, 2026
CVE-2026-110044
8.8 HIGH

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-110043
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-109505
8.8 HIGH

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-109504
7.3 HIGH

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Nov 10, 2026
CVE-2026-109503
8.8 HIGH

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-109502
8.8 HIGH

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-109501
8.8 HIGH

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-109500
7.5 HIGH

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-109499
8.8 HIGH

Access of resource using incompatible type ('type confusion') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-109498
7.5 HIGH

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-109497
7.3 HIGH

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Nov 10, 2026
CVE-2026-109496
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Nov 10, 2026
CVE-2026-109495
6.6 MEDIUM

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Nov 10, 2026
CVE-2026-109494
8.8 HIGH

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Nov 10, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.