cve.bz

microsoft vulnerabilities, newest first

Filter
  1. 8.8CVE-2026-96192EPSS 0.6%

    Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

  2. 4.3CVE-2026-85330EPSS 0.4%

    Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

  3. 9.2CVE-2026-111497KEVEPSS 83%

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive mem…

  4. 6.5CVE-2026-108455EPSS 0.7%

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  5. 6.5CVE-2026-108454EPSS 0.7%

    Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  6. 6.5CVE-2026-108453EPSS 0.8%

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  7. 8.8CVE-2026-108452EPSS 0.8%

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  8. 8.8CVE-2026-108451EPSS 0.6%

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  9. 8.8CVE-2026-108450EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  10. 8.8CVE-2026-108449EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  11. 7.5CVE-2026-108448EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  12. 8.8CVE-2026-108447EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  13. 8.8CVE-2026-108446EPSS 0.6%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  14. 8.8CVE-2026-108445EPSS 0.6%

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  15. 8.8CVE-2026-108444EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  16. 8.8CVE-2026-108443EPSS 0.6%

    Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  17. 8.8CVE-2026-108442EPSS 0.6%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  18. 8.8CVE-2026-108441EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  19. 8.8CVE-2026-108440EPSS 0.6%

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  20. 8.8CVE-2026-108439EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  21. 6.5CVE-2026-108438EPSS 0.7%

    Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  22. 8.8CVE-2026-108437EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  23. 6.5CVE-2026-108436EPSS 0.7%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  24. 6.5CVE-2026-108435EPSS 0.7%

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  25. 6.5CVE-2026-108434EPSS 0.7%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  26. 7.8CVE-2026-108433EPSS 0.4%

    Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

  27. 8.8CVE-2026-108432EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  28. 8.8CVE-2026-108431EPSS 0.6%

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  29. 8.8CVE-2026-108430EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  30. 8.8CVE-2026-108429EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  31. 8.8CVE-2026-108428EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  32. 8.8CVE-2026-108427EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  33. 8.8CVE-2026-108426EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  34. 8.8CVE-2026-88164EPSS 0.8%

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  35. 8.8CVE-2026-102855EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

  36. 6.5CVE-2026-97844EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  37. 6.5CVE-2026-97843EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  38. 6.5CVE-2026-97842EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  39. 6.5CVE-2026-97841EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  40. 6.5CVE-2026-97840EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  41. 6.5CVE-2026-97839EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  42. 6.5CVE-2026-97838EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  43. 6.5CVE-2026-97837EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  44. 6.5CVE-2026-97836EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  45. 6.5CVE-2026-97835EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  46. 6.5CVE-2026-97834EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  47. 6.5CVE-2026-97833EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  48. 6.5CVE-2026-97832EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  49. 6.5CVE-2026-97831EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  50. 7.5CVE-2026-97830EPSS 1.1%

    Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.