Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

465 records in Office 2024 · all components

TI-2026-72350 CVE-2026-70291 · GHSA-58m6-fvhq-5883

Heap overflow in Microsoft Office Outlook lets attackers run code

Priority MEDIUM 52

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01329 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-122
TI-2026-72305 CVE-2026-70242 · GHSA-qg8w-687j-6r9q

Heap overflow in Microsoft Office Outlook allows remote code execution

Priority MEDIUM 52

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01569 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-73162 CVE-2026-97749 · GHSA-h6m4-54g6-gj6c

Double free in Microsoft Office Outlook allows remote code execution

Priority MEDIUM 51

Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01196 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-415
TI-2026-73149 CVE-2026-97016 · GHSA-cf52-mp5c-rw57

Heap overflow in Microsoft Outlook allows remote code execution

Priority MEDIUM 51

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01172 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-72959 CVE-2026-88178 · GHSA-cm9h-wc7c-f2hr

Use after free in Microsoft PowerPoint allows remote code execution

Priority MEDIUM 51

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00972 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-416
TI-2026-72940 CVE-2026-88156 · GHSA-pxgg-c4xh-w6pg

Stack overflow in Microsoft Office Outlook allows code execution

Priority MEDIUM 51

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01172 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-121
TI-2026-72358 CVE-2026-70300 · GHSA-qj8r-m7gw-387x

Untrusted pointer dereference in Microsoft Word allows code execution

Priority MEDIUM 51

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01128 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-822
TI-2026-54593 CVE-2026-78509 · GHSA-8rh6-mjg6-wf8q

Microsoft Office Outlook Remote Code Execution Vulnerability

Priority MEDIUM 51

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
TI-2026-54589 CVE-2026-78505 · GHSA-6hj5-28cq-px6j

Microsoft Office Remote Code Execution Vulnerability

Priority MEDIUM 48

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
TI-2026-54594 CVE-2026-78510 · GHSA-mp8c-hc24-4rfr

Microsoft Outlook and Word Remote Code Execution Vulnerability

Priority MEDIUM 45

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00373 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
TI-2026-56179 CVE-2026-81385 · GHSA-8vjw-jph5-84g4

Microsoft Office Publisher Remote Code Execution Vulnerability

Priority MEDIUM 43

Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01288 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-502
TI-2026-73374 CVE-2026-105718 · GHSA-v5vx-f5c6-h39j

Out-of-bounds read in Microsoft Excel enables remote code execution

Priority MEDIUM 42

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00955 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-125
TI-2026-73373 CVE-2026-105717 · GHSA-5rw2-7jqh-p7rv

Heap overflow in Microsoft Office Access enables remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00877 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-73372 CVE-2026-105716 · GHSA-m7f9-7j82-2m93

Heap overflow in Microsoft Office Access allows remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-73367 CVE-2026-105598 · GHSA-crcv-4x3p-wqwh

Heap overflow in Microsoft Office Access allows remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-73366 CVE-2026-105597 · GHSA-33qh-cjjj-79m2

Heap overflow in Microsoft Office Access allows code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-73365 CVE-2026-105596 · GHSA-wfmv-x74h-pcxp

Heap overflow in Microsoft Office Access enables remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-73364 CVE-2026-105595 · GHSA-c528-pfqw-6349

Out-of-bounds read in Microsoft Office Access allows code execution

Priority MEDIUM 42

Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-125
TI-2026-73363 CVE-2026-105593 · GHSA-g4c6-rr9v-2rhv

Heap overflow in Microsoft Office Access allows remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-73361 CVE-2026-105591 · GHSA-gvgp-34xh-cx7j

Heap overflow in Microsoft Office Access allows remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-73310 CVE-2026-102857 · GHSA-rhqg-54p5-89mw

Heap overflow in Microsoft Office Visio enables remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00904 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-73309 CVE-2026-102856 · GHSA-jj8c-vxr7-9cqw

Heap overflow in Microsoft Office Visio allows remote code execution

Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00886 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-73257 CVE-2026-100212 · GHSA-pj29-hgrw-877w

Use after free in Microsoft Office Excel allows code execution

Priority MEDIUM 42

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00912 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +3 CWE-416
TI-2026-73256 CVE-2026-100211 · GHSA-rcwh-4x4r-ph63

Use-after-free in Microsoft Office Excel allows remote code execution

Priority MEDIUM 42

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0093 Published 2026-10-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +1 CWE-416
Load more
Open these records in search →