Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

368 records in Microsoft 365 · all components

TI-2026-72350 CVE-2026-70291 · GHSA-58m6-fvhq-5883

Heap overflow in Microsoft Office Outlook lets attackers run code

Priority MEDIUM 52

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01329 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-122
TI-2026-72959 CVE-2026-88178 · GHSA-cm9h-wc7c-f2hr

Use after free in Microsoft PowerPoint allows remote code execution

Priority MEDIUM 51

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00972 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-416
TI-2026-72940 CVE-2026-88156 · GHSA-pxgg-c4xh-w6pg

Stack overflow in Microsoft Office Outlook allows code execution

Priority MEDIUM 51

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01172 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-121
TI-2026-54593 CVE-2026-78509 · GHSA-8rh6-mjg6-wf8q

Microsoft Office Outlook Remote Code Execution Vulnerability

Priority MEDIUM 51

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
TI-2026-54589 CVE-2026-78505 · GHSA-6hj5-28cq-px6j

Microsoft Office Remote Code Execution Vulnerability

Priority MEDIUM 48

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
TI-2026-54594 CVE-2026-78510 · GHSA-mp8c-hc24-4rfr

Microsoft Outlook and Word Remote Code Execution Vulnerability

Priority MEDIUM 45

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00373 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
TI-2026-73374 CVE-2026-105718 · GHSA-v5vx-f5c6-h39j

Out-of-bounds read in Microsoft Excel enables remote code execution

Priority MEDIUM 42

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00955 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-125
TI-2026-73257 CVE-2026-100212 · GHSA-pj29-hgrw-877w

Use after free in Microsoft Office Excel allows code execution

Priority MEDIUM 42

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00912 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-416
TI-2026-73256 CVE-2026-100211 · GHSA-rcwh-4x4r-ph63

Use-after-free in Microsoft Office Excel allows remote code execution

Priority MEDIUM 42

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0093 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +1 CWE-416
TI-2026-73255 CVE-2026-100210 · GHSA-52gj-q4gm-73rh

Microsoft Office Excel remote code execution vulnerability

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0093 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-122
TI-2026-73254 CVE-2026-100209 · GHSA-xj5f-rvvj-2rmf

Use after free in Microsoft Office Excel enables code execution

Priority MEDIUM 42

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0095 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +1 CWE-416
TI-2026-73192 CVE-2026-97780 · GHSA-p8f3-wwp6-9v5j

Heap overflow in Microsoft Office Excel allows remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0082 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-122
TI-2026-73188 CVE-2026-97776 · GHSA-cw7p-jc38-4h69

Buffer overflow in Microsoft Office Excel allows code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0082 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-122
TI-2026-73187 CVE-2026-97775 · GHSA-jp82-j6gg-9ghp

Microsoft Office Excel Remote Code Execution Vulnerability

Priority MEDIUM 42

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00841 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-400
TI-2026-73185 CVE-2026-97773 · GHSA-4hcp-hgjp-r2pf

Heap overflow in Microsoft Office Excel allows remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00841 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-122
TI-2026-73184 CVE-2026-97772 · GHSA-qfcc-8m6f-hq22

Double free in Microsoft Office Excel lets attackers execute code

Priority MEDIUM 42

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00841 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-415
TI-2026-73181 CVE-2026-97769 · GHSA-7366-jxrq-39px

Heap overflow in Microsoft Office Excel allows remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00901 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-122
TI-2026-73180 CVE-2026-97768 · GHSA-8pm4-rfq4-rg32

Heap overflow in Microsoft Excel allows remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00859 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-122
TI-2026-73177 CVE-2026-97765 · GHSA-345c-r5qq-gwf9

Heap overflow in Microsoft Excel allows remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0082 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-122
TI-2026-73176 CVE-2026-97763 · GHSA-94fg-h7w4-j3f9

Buffer overflow in Microsoft Excel allows remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00859 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-122
TI-2026-73175 CVE-2026-97762 · GHSA-5vhh-v2gq-6frr

x

Priority MEDIUM 42

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00859 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-787
TI-2026-73174 CVE-2026-97761 · GHSA-7h6f-wph8-848j

Stack buffer overflow in Microsoft Office Excel allows code execution

Priority MEDIUM 42

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0082 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +1 CWE-121
TI-2026-73172 CVE-2026-97759 · GHSA-5wjj-gc9g-mpm4

Use after free in Microsoft Office Excel allows code execution

Priority MEDIUM 42

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00804 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +1 CWE-416
Load more
Open these records in search →