Vulnerability index

Browse CVEs

119 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Deserialization of Untrusted DataCWE-502 × clear
Sharepoint Server HIGH 8.8
CVE-2026-70321

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20522+
Fix from $4,900 2026-08-11
Sharepoint Server HIGH 8.8
CVE-2026-66808

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20522+
Fix from $4,900 2026-08-11
Dynamics 365 HIGH 8.8
CVE-2026-65815

Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

No fix yet
Fix from $4,900 2026-08-11
Sharepoint Server HIGH 8.8
CVE-2026-66805

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20522+
Fix from $4,900 2026-08-11
Sharepoint Server HIGH 8.8
CVE-2026-65663

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20522+
Fix from $4,900 2026-08-11
Sharepoint Server HIGH 8.8
CVE-2026-65665

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20522+
Fix from $4,900 2026-08-11
Sharepoint Server HIGH 8.8
CVE-2026-65658

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20522+
Fix from $4,900 2026-08-11
Sharepoint Server HIGH 8.8
CVE-2026-64901

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20522+
Fix from $4,900 2026-08-11
Sharepoint Server HIGH 8.8
CVE-2026-63514

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20522+
Fix from $4,900 2026-08-11
Sharepoint Server MEDIUM 6.5
CVE-2026-63516

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Fix: 16.0.19725.20522+
Fix from $4,000 2026-08-11
Exchange Server MEDIUM 6.5
CVE-2026-62912

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.

Fix: 15.02.2562.046+
Fix from $4,000 2026-08-11
Windows App CRITICAL 9.8
CVE-2026-59124

Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.

Fix: 2.0.1314.0+
Fix from $5,750 2026-08-11
Azure Service Bus CRITICAL 9.9
CVE-2026-50515

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.

No fix yet
Fix from $2,300 2026-08-07
365 Copilot CRITICAL 9.9
CVE-2026-50517

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

No fix yet
Fix from $2,300 2026-07-24
.net Framework HIGH 7.8
CVE-2026-50649

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

Fix: 8.0.29 / 9.0.18+
Fix from $1,950 2026-07-14
.net Framework HIGH 7.8
CVE-2026-50646

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

Fix: 8.0.29 / 9.0.18+
Fix from $1,950 2026-07-14
Dynamics Nav CRITICAL 9.8
CVE-2026-55944

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.

Mitigation only
Fix from $2,300 2026-07-14
Windows 10 1607 HIGH 7.8
CVE-2026-50509

Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Sharepoint Server CRITICAL 9.8
CVE-2026-58644 KEVEPSS 45%

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Fix: 16.0.19725.20434+
Fix from $2,300 2026-07-14
Exchange Server HIGH 7.8
CVE-2026-55009

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Fix: 15.02.2562.045+
Fix from $1,950 2026-07-14
Sql Server 2016 HIGH 8.8
CVE-2026-54117

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Fix: 13.0.6500.1 / 13.0.7095.1+
Fix from $1,950 2026-07-14
Sql Server 2016 HIGH 8.8
CVE-2026-54118

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Fix: 13.0.6500.1 / 13.0.7095.1+
Fix from $1,950 2026-07-14
Sharepoint Server CRITICAL 9.8
CVE-2026-50522 KEVEPSS 77%

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Fix: 16.0.19725.20434+
Fix from $2,300 2026-07-14
.net Framework HIGH 7.5
CVE-2026-50652

Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.

Mitigation only
Fix from $1,950 2026-07-14
Edge Chromium HIGH 8.3
CVE-2026-58281

Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Fix: 150.0.4078.48+
Fix from $1,950 2026-07-11
Sharepoint Server MEDIUM 5.4
CVE-2026-48560

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Fix: 16.0.19725.20384+
Fix from $1,600 2026-06-09
Sharepoint Server HIGH 8.8
CVE-2026-45484EPSS 35%

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Fix: 16.0.19725.20384+
Fix from $1,950 2026-06-09
Nuance Powerscribe 360 CRITICAL 9.8
CVE-2026-26142

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Mitigation only
Fix from $2,300 2026-06-09
Sharepoint Server HIGH 8.8
CVE-2026-45659 KEVEPSS 10%

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20280+
Fix from $1,950 2026-05-22
Planetary Computer HIGH 7.5
CVE-2026-41104

Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose information over a network.

Mitigation only
Fix from $1,950 2026-05-22