Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
37,202 matching · page 185/745Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-68792(opens NVD record) | High | 7.8 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-66810(opens NVD record) | Medium | 5.5 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-66809(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-66808(opens NVD record) | High | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-66807(opens NVD record) | High | 7.8 | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-66806(opens NVD record) | Medium | 5.5 | Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-66805(opens NVD record) | High | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-66804(opens NVD record) | High | 7.8 | Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-66802(opens NVD record) | High | 8.1 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-66799(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-66301(opens NVD record) | Medium | 6.5 | Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network. | Aug 11, 2026 |
| CVE-2026-65815(opens NVD record) | High | 8.8 | Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-65814(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65813(opens NVD record) | Medium | 6.5 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | Aug 11, 2026 |
| CVE-2026-65811(opens NVD record) | High | 8.8 | Improper input validation in Power BI allows an authorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-65810(opens NVD record) | High | 7.8 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65807(opens NVD record) | High | 8.8 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-65806(opens NVD record) | Medium | 6.5 | Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network. | Aug 11, 2026 |
| CVE-2026-65799(opens NVD record) | Medium | 6.7 | Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65798(opens NVD record) | Medium | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65797(opens NVD record) | Medium | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65796(opens NVD record) | High | 8.1 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-65795(opens NVD record) | Medium | 6.7 | Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65794(opens NVD record) | Medium | 6.5 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. | Aug 11, 2026 |
| CVE-2026-65791(opens NVD record) | Critical | 9.8 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-65790(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65789(opens NVD record) | High | 8.1 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-65788(opens NVD record) | High | 7.0 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65787(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65786(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65785(opens NVD record) | Medium | 6.5 | Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. | Aug 11, 2026 |
| CVE-2026-65784(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-65783(opens NVD record) | High | 7.0 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65782(opens NVD record) | High | 7.0 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65781(opens NVD record) | High | 7.0 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65780(opens NVD record) | High | 7.0 | Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65779(opens NVD record) | High | 7.0 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65778(opens NVD record) | High | 7.0 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65777(opens NVD record) | Medium | 5.3 | Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network. | Aug 11, 2026 |
| CVE-2026-65776(opens NVD record) | High | 7.0 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65775(opens NVD record) | High | 7.8 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65774(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65773(opens NVD record) | High | 7.8 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65769(opens NVD record) | Medium | 6.5 | Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network. | Aug 11, 2026 |
| CVE-2026-65768(opens NVD record) | High | 8.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-65767(opens NVD record) | High | 8.8 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network. | Aug 11, 2026 |
| CVE-2026-65681(opens NVD record) | High | 7.5 | Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network. | Aug 11, 2026 |
| CVE-2026-65679(opens NVD record) | High | 8.1 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-65678(opens NVD record) | High | 7.0 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-65675(opens NVD record) | High | 7.1 | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network. | Aug 11, 2026 |