cve.bz

New CVEs this week, the last 7 days, newest first, page 60

Filter

The new CVEs published in the last 7 days, newest first, with CVSS, EPSS, CISA KEV and public exploits for each. Refreshed every few minutes. Narrow it: in CISA KEV · critical. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, Patch Tuesday

  1. 8.0CVE-2026-118113EPSS 0.9%

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  2. 8.0CVE-2026-118112EPSS 0.9%

    Improper control of generation of code ('code injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  3. 8.0CVE-2026-118111EPSS 0.4%

    Origin validation error in SQL Server allows an authorized attacker to elevate privileges over a network.

  4. 8.8CVE-2026-118110EPSS 1.1%

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  5. 8.8CVE-2026-118109EPSS 1.1%

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  6. 7.5CVE-2026-118108EPSS 0.7%

    Improper authorization in SQL Server allows an authorized attacker to elevate privileges over a network.

  7. 8.1CVE-2026-118106EPSS 0.7%

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  8. 8.8CVE-2026-118105EPSS 0.9%

    Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

  9. 6.5CVE-2026-118104EPSS 0.9%

    Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.

  10. 6.5CVE-2026-118103EPSS 0.9%

    Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.

  11. 5.9CVE-2026-118102EPSS 0.5%

    Use of a broken or risky cryptographic algorithm in SQL Server allows an unauthorized attacker to disclose information over a network.

  12. 7.5CVE-2026-116947EPSS 0.6%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  13. 8.8CVE-2026-116946EPSS 1.0%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  14. 9.8CVE-2026-116945EPSS 1.2%

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  15. 7.2CVE-2026-116944EPSS 0.9%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  16. 7.5CVE-2026-116943EPSS 1.0%

    Buffer over-read in SQL Server allows an unauthorized attacker to disclose information over a network.

  17. 8.8CVE-2026-116942EPSS 0.9%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  18. 8.8CVE-2026-116941EPSS 0.9%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  19. 4.9CVE-2026-116940EPSS 0.9%

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  20. 5.7CVE-2026-116939EPSS 0.8%

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  21. 7.5CVE-2026-116938EPSS 0.7%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  22. 7.5CVE-2026-116937EPSS 0.8%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  23. 7.2CVE-2026-116936EPSS 1.1%

    Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  24. 6.5CVE-2026-116935EPSS 0.9%

    Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

  25. 8.8CVE-2026-116934EPSS 0.8%

    Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.

  26. 7.2CVE-2026-116933EPSS 1.0%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  27. 6.5CVE-2026-116932EPSS 1.1%

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  28. 7.5CVE-2026-116931EPSS 0.7%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  29. 8.8CVE-2026-116930EPSS 0.9%

    Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an unauthorized attacker to execute code over a network.

  30. 7.5CVE-2026-116929EPSS 0.7%

    Execution with unnecessary privileges in SQL Server allows an authorized attacker to elevate privileges over a network.

  31. 9.8CVE-2026-116928EPSS 1.2%

    Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

  32. 8.8CVE-2026-116927EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  33. 7.5CVE-2026-116926EPSS 1.1%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

  34. 8.8CVE-2026-116925EPSS 0.7%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  35. 8.8CVE-2026-116923EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  36. 6.5CVE-2026-116922EPSS 1.0%

    Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  37. 8.8CVE-2026-116722EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  38. 6.5CVE-2026-116721EPSS 1.0%

    Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  39. 8.8CVE-2026-116720EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  40. 8.8CVE-2026-116719EPSS 0.7%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  41. 7.5CVE-2026-116718EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  42. 8.8CVE-2026-116717EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  43. 7.8CVE-2026-116714EPSS 0.4%

    Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

  44. 8.1CVE-2026-116710EPSS 0.7%

    Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

  45. 7.0CVE-2026-116707EPSS 0.3%

    Use after free in Windows Link Layer Topology Discovery Protocol allows an authorized attacker to elevate privileges locally.

  46. 7.5CVE-2026-116706EPSS 0.4%

    Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.

  47. 6.6CVE-2026-116700EPSS 0.5%

    Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack.

  48. 6.5CVE-2026-116699EPSS 0.9%

    Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  49. 7.5CVE-2026-116698EPSS 0.6%

    Use after free in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

  50. 5.9CVE-2026-116697EPSS 1.0%

    Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny service over a network.