Browse CVEs

HIGH 7.8 CVE-2026-69414 Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "Shield… Malware Protection Engine No fix yet Fix from $4,9002026-08-14 HIGH 7.8 CVE-2026-50523 Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute … Powershell No fix yet Fix from $4,9002026-08-14 HIGH 8.3 CVE-2026-72970 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. Edge Chromium No fix yet Fix from $4,9002026-08-14 MEDIUM 5.4 CVE-2026-70339 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over… Edge Chromium No fix yet Fix from $4,0002026-08-11 MEDIUM 6.7 CVE-2026-65680 Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally. Onedrive No fix yet Fix from $4,0002026-08-11 HIGH 8.1 CVE-2026-71331 Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execut… Windows 10 1809 No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-70354 Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. Visual Studio 2022 No fix yet Fix from $4,9002026-08-11 HIGH 8.8 CVE-2026-70340 Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. Azure Cyclecloud No fix yet Fix from $4,9002026-08-11 HIGH 8.8 CVE-2026-70329 Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 365 Apps No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-70330 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. Windows 10 1607 No fix yet Fix from $4,9002026-08-11 MEDIUM 6.5 CVE-2026-70327 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 6.5 CVE-2026-70328 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70323 Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70325 Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70316 Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70317 Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70318 Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70319 Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70320 Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70322 Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 HIGH 7.8 CVE-2026-70311 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-70313 Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,9002026-08-11 MEDIUM 5.5 CVE-2026-70310 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70312 Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70314 Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70315 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 HIGH 7.8 CVE-2026-70130 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-70304 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. Windows 10 1607 No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-68817 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-68810 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11