cve.bz

microsoft vulnerabilities, newest first, page 30

Filter
  1. 7.8CVE-2026-81397EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  2. 7.8CVE-2026-81396EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  3. 5.5CVE-2026-81395EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  4. 5.5CVE-2026-81394EPSS 0.6%

    Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  5. 5.5CVE-2026-81393EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  6. 5.5CVE-2026-81392EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  7. 5.5CVE-2026-81391EPSS 0.5%

    Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  8. 5.5CVE-2026-81390EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  9. 7.0CVE-2026-81389EPSS 0.4%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  10. 7.8CVE-2026-81388EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  11. 5.5CVE-2026-81387EPSS 0.6%

    Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  12. 7.8CVE-2026-81386EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  13. 8.8CVE-2026-81385EPSS 1.3%

    Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

  14. 7.4CVE-2026-81383EPSS 0.9%

    Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  15. 7.5CVE-2026-81381EPSS 0.9%

    Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  16. 5.9CVE-2026-81380EPSS 0.7%

    Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  17. 8.2CVE-2026-81379EPSS 0.5%

    Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  18. 8.2CVE-2026-81378EPSS 0.5%

    Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  19. 6.5CVE-2026-81377EPSS 0.8%

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

  20. 9.6CVE-2026-81376EPSS 0.9%

    Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  21. 8.2CVE-2026-81357EPSS 0.5%

    Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  22. 8.2CVE-2026-81356EPSS 0.5%

    Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  23. 7.8CVE-2026-81355EPSS 0.3%

    Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.

  24. 8.2CVE-2026-81354EPSS 0.3%

    Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

  25. 7.8CVE-2026-81353EPSS 0.5%

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

  26. 8.8CVE-2026-81352EPSS 0.6%

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

  27. 7.2CVE-2026-81349EPSS 1.0%

    Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.

  28. 8.6CVE-2026-80097EPSS 0.5%

    Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.

  29. 8.8CVE-2026-80096EPSS 0.9%

    Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

  30. 7.0CVE-2026-80093EPSS 0.3%

    Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  31. 6.5CVE-2026-80091EPSS 0.9%

    Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  32. 6.5CVE-2026-80090EPSS 0.9%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  33. 6.5CVE-2026-80089EPSS 0.9%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  34. 6.5CVE-2026-80088EPSS 0.9%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  35. 6.5CVE-2026-80087EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  36. 6.5CVE-2026-80086EPSS 0.9%

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  37. 8.8CVE-2026-80085EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  38. 6.5CVE-2026-80084EPSS 0.9%

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

  39. 8.8CVE-2026-80083EPSS 0.3%

    Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

  40. 6.5CVE-2026-80082EPSS 0.9%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  41. 8.8CVE-2026-80081EPSS 0.8%

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  42. 8.8CVE-2026-80080EPSS 0.8%

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  43. 6.5CVE-2026-80079EPSS 0.9%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  44. 6.5CVE-2026-80078EPSS 0.9%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  45. 8.8CVE-2026-80077EPSS 0.8%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  46. 6.5CVE-2026-80076EPSS 0.9%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  47. 7.8CVE-2026-80075EPSS 0.3%

    Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.

  48. 8.8CVE-2026-80074EPSS 0.8%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  49. 6.5CVE-2026-80073EPSS 0.9%

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

  50. 8.8CVE-2026-78526EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.