Vulnerability index

Browse CVEs

3,135 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Malware Protection Engine HIGH 7.8
CVE-2026-69414

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "Shield…

No fix yet
Fix from $4,900 2026-08-14
Powershell HIGH 7.8
CVE-2026-50523

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute …

No fix yet
Fix from $4,900 2026-08-14
Edge Chromium HIGH 8.3
CVE-2026-72970

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

No fix yet
Fix from $4,900 2026-08-14
Edge Chromium MEDIUM 5.4
CVE-2026-70339

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over…

No fix yet
Fix from $4,000 2026-08-11
Onedrive MEDIUM 6.7
CVE-2026-65680

Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.

No fix yet
Fix from $4,000 2026-08-11
Windows 10 1809 HIGH 8.1
CVE-2026-71331

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execut…

No fix yet
Fix from $4,900 2026-08-11
Visual Studio 2022 HIGH 7.8
CVE-2026-70354

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

No fix yet
Fix from $4,900 2026-08-11
Azure Cyclecloud HIGH 8.8
CVE-2026-70340

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

No fix yet
Fix from $4,900 2026-08-11
365 Apps HIGH 8.8
CVE-2026-70329

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

No fix yet
Fix from $4,900 2026-08-11
Windows 10 1607 HIGH 7.8
CVE-2026-70330

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

No fix yet
Fix from $4,900 2026-08-11
365 Apps MEDIUM 6.5
CVE-2026-70327

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

No fix yet
Fix from $4,000 2026-08-11
365 Apps MEDIUM 6.5
CVE-2026-70328

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

No fix yet
Fix from $4,000 2026-08-11
365 Apps MEDIUM 5.5
CVE-2026-70323

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,000 2026-08-11
365 Apps MEDIUM 5.5
CVE-2026-70325

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,000 2026-08-11
365 Apps MEDIUM 5.5
CVE-2026-70316

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,000 2026-08-11
365 Apps MEDIUM 5.5
CVE-2026-70317

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,000 2026-08-11
365 Apps MEDIUM 5.5
CVE-2026-70318

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,000 2026-08-11
365 Apps MEDIUM 5.5
CVE-2026-70319

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,000 2026-08-11
365 Apps MEDIUM 5.5
CVE-2026-70320

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,000 2026-08-11
365 Apps MEDIUM 5.5
CVE-2026-70322

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,000 2026-08-11
365 Apps HIGH 7.8
CVE-2026-70311

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

No fix yet
Fix from $4,900 2026-08-11
365 Apps HIGH 7.8
CVE-2026-70313

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,900 2026-08-11
365 Apps MEDIUM 5.5
CVE-2026-70310

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,000 2026-08-11
365 Apps MEDIUM 5.5
CVE-2026-70312

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,000 2026-08-11
365 Apps MEDIUM 5.5
CVE-2026-70314

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,000 2026-08-11
365 Apps MEDIUM 5.5
CVE-2026-70315

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

No fix yet
Fix from $4,000 2026-08-11
365 Apps HIGH 7.8
CVE-2026-70130

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

No fix yet
Fix from $4,900 2026-08-11
Windows 10 1607 HIGH 7.8
CVE-2026-70304

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.

No fix yet
Fix from $4,900 2026-08-11
365 Apps HIGH 7.8
CVE-2026-68817

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

No fix yet
Fix from $4,900 2026-08-11
365 Apps HIGH 7.8
CVE-2026-68810

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

No fix yet
Fix from $4,900 2026-08-11