cve.bz

microsoft vulnerabilities, newest first, page 51

Filter
  1. 6.5CVE-2026-65675EPSS 0.6%

    No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.

  2. 7.8CVE-2026-65673EPSS 0.3%

    Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a network.

  3. 7.8CVE-2026-65672EPSS 0.3%

    Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

  4. 7.8CVE-2026-65671EPSS 0.3%

    Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

  5. 8.8CVE-2026-65665EPSS 1.7%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  6. 7.8CVE-2026-65664EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  7. 8.8CVE-2026-65663EPSS 2.0%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  8. 5.5CVE-2026-65662EPSS 0.4%

    Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.

  9. 7.8CVE-2026-65661EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  10. 8.8CVE-2026-65660KEVEPSS 8.2%

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  11. 8.8CVE-2026-65658EPSS 2.0%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  12. 7.8CVE-2026-65657EPSS 0.5%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  13. 7.8CVE-2026-65656EPSS 0.5%

    Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.

  14. 5.4CVE-2026-64922EPSS 0.6%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  15. 8.8CVE-2026-64921EPSS 0.9%

    Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  16. 7.8CVE-2026-64920EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  17. 7.8CVE-2026-64919EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  18. 5.5CVE-2026-64917EPSS 0.5%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  19. 5.4CVE-2026-64916EPSS 0.6%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  20. 7.8CVE-2026-64915EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  21. 7.8CVE-2026-64914EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  22. 7.8CVE-2026-64912EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  23. 7.8CVE-2026-64911EPSS 0.5%

    Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.

  24. 7.8CVE-2026-64910EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

  25. 7.8CVE-2026-64909EPSS 0.5%

    Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.

  26. 7.8CVE-2026-64908EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  27. 7.8CVE-2026-64907EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  28. 7.8CVE-2026-64906EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  29. 7.8CVE-2026-64905EPSS 0.5%

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  30. 7.8CVE-2026-64904EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

  31. 7.8CVE-2026-64903EPSS 0.5%

    Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.

  32. 5.4CVE-2026-64902EPSS 0.6%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  33. 8.8CVE-2026-64901EPSS 2.0%

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  34. 5.4CVE-2026-64900EPSS 0.6%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  35. 5.5CVE-2026-64899EPSS 0.5%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  36. 7.8CVE-2026-64898EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  37. 5.4CVE-2026-64897EPSS 0.6%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  38. 7.8CVE-2026-63533EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  39. 7.8CVE-2026-63532EPSS 0.5%

    Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.

  40. 5.5CVE-2026-63531EPSS 0.5%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  41. 5.5CVE-2026-63530EPSS 0.5%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  42. 5.5CVE-2026-63529EPSS 0.5%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  43. 5.5CVE-2026-63528EPSS 0.5%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  44. 7.8CVE-2026-63527EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  45. 7.8CVE-2026-63526EPSS 0.5%

    Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  46. 7.8CVE-2026-63525EPSS 0.5%

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  47. 5.5CVE-2026-63524EPSS 0.5%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  48. 7.8CVE-2026-63522EPSS 0.3%

    Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.

  49. 5.5CVE-2026-63521EPSS 0.4%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  50. 8.1CVE-2026-63520EPSS 1.0%

    Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.