59.497 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.178 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-69556 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69529 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69518 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69511 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69499 | HIGH 8.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69495 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69494 | HIGH 8.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69461 | HIGH 8.8 | microsoft windows_10_1607 Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69442 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69434 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69386 | HIGH 8.8 | microsoft windows_10_1809 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69360 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69334 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69291 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69285 | HIGH 8.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-69266 | HIGH 8.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-68828 | HIGH 8.8 | microsoft windows_10_1607 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-62744 | HIGH 8.8 | microsoft windows_11_24h2 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-62706 | HIGH 8.8 | microsoft windows_10_1607 Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-72984 | HIGH 8.8 | microsoft edge_chromium Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-70329 | HIGH 8.8 | microsoft 365_apps Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-65807 | HIGH 8.8 | microsoft 365_apps Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-62824 | HIGH 8.8 | microsoft windows_10_1607 Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-62822 | HIGH 8.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. | 0.8% | — |
| CVE-2026-62795 | HIGH 8.8 | microsoft windows_10_1607 Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. | 0.8% | — |