Vulnerability index

Browse CVEs

356 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Sharepoint Server HIGH 8.7
CVE-2026-70355

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20522+
Fix from $4,900 2026-08-11
Sharepoint Server CRITICAL 9.3
CVE-2026-70306

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker t…

Fix: 16.0.19725.20434+
Fix from $5,750 2026-08-11
Teams HIGH 7.6
CVE-2026-65767

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to …

Fix: 1.0.76.202611302+
Fix from $4,900 2026-08-11
Sharepoint Server MEDIUM 5.4
CVE-2026-64922

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20522+
Fix from $4,000 2026-08-11
Sharepoint Server MEDIUM 5.4
CVE-2026-64916

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20522+
Fix from $4,000 2026-08-11
Sharepoint Server MEDIUM 5.4
CVE-2026-64902

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20522+
Fix from $4,000 2026-08-11
Sharepoint Server MEDIUM 5.4
CVE-2026-64897

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20522+
Fix from $4,000 2026-08-11
Sharepoint Server MEDIUM 5.4
CVE-2026-64900

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20522+
Fix from $4,000 2026-08-11
Exchange Server MEDIUM 5.4
CVE-2026-62914

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to pe…

Fix: 15.02.2562.046+
Fix from $4,000 2026-08-11
Sharepoint Server MEDIUM 5.4
CVE-2026-62829

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20522+
Fix from $4,000 2026-08-11
Azure Storage Explorer CRITICAL 9.6
CVE-2026-57104

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to ele…

No fix yet
Fix from $5,750 2026-08-11
Sharepoint Server MEDIUM 5.4
CVE-2026-57105

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20522+
Fix from $4,000 2026-08-11
Sharepoint Online CRITICAL 9.6
CVE-2026-70332

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker t…

No fix yet
Fix from $2,300 2026-08-07
Windows Admin Center MEDIUM 6.1
CVE-2026-58643

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perfo…

Fix: 2511+
Fix from $1,600 2026-07-16
Sharepoint Server MEDIUM 5.4
CVE-2026-62826

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-16
Visual Studio Code MEDIUM 6.1
CVE-2026-57101

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass …

Fix: 1.128.1+
Fix from $1,600 2026-07-14
Sharepoint Server MEDIUM 5.4
CVE-2026-55135

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-14
Sharepoint Server MEDIUM 5.4
CVE-2026-55126

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-14
Sharepoint Server HIGH 8.7
CVE-2026-55034

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20434+
Fix from $1,950 2026-07-14
Sharepoint Server MEDIUM 5.4
CVE-2026-55030

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-14
Sharepoint Server HIGH 8.7
CVE-2026-55021

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20434+
Fix from $1,950 2026-07-14
Sharepoint Server MEDIUM 5.4
CVE-2026-55016

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-14
Sharepoint Server MEDIUM 5.4
CVE-2026-55019

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-14
Sharepoint Server MEDIUM 5.4
CVE-2026-55020

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-14
Power Bi Report Server MEDIUM 5.4
CVE-2026-58647

Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing ov…

Fix: 15.0.1121.120+
Fix from $1,600 2026-07-14
Exchange Server CRITICAL 9.6
CVE-2026-55008

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to …

Fix: 15.02.2562.045+
Fix from $2,300 2026-07-14
Dynamics 365 Customer Voice MEDIUM 6.1
CVE-2026-47646

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker t…

Mitigation only
Fix from $1,600 2026-07-09
Edge Chromium MEDIUM 6.1
CVE-2026-58524

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attack…

Fix: 150.0.4078.48+
Fix from $1,600 2026-07-03
Edge Chromium MEDIUM 6.1
CVE-2026-58298

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attack…

Fix: 150.0.4078.48+
Fix from $1,600 2026-07-03
Edge Chromium HIGH 7.1
CVE-2026-57977

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attack…

Fix: 150.0.4078.48+
Fix from $1,950 2026-07-03