Browse CVEs

HIGH 7.8 CVE-2026-45643 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-45486 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 8.2 CVE-2026-45476 Use after free in Linux MANA Driver allows an authorized attacker to elevate privileges locally. Azure Network Adapter Mitigation only Fix from $1,9502026-06-09 HIGH 8.4 CVE-2026-45472 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 8.4 CVE-2026-45474 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-45469 Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 8.4 CVE-2026-45461 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 8.4 CVE-2026-45463 Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-45457 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 8.2 CVE-2026-44822 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-44820 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-44823 Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 7.0 CVE-2026-44818 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker… 365 Apps Mitigation only Fix from $1,9502026-06-09 HIGH 7.8 CVE-2026-44817 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-06-09 CRITICAL 9.8 CVE-2026-26142 Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network. Nuance Powerscribe 360 Mitigation only Fix from $2,3002026-06-09 CRITICAL 9.8 CVE-2026-48567 Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network. Azure Horizondb No fix yet Fix from $2,3002026-06-04 HIGH 8.8 CVE-2026-45497 Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute cod… Copilot Mitigation only Fix from $1,9502026-06-04 HIGH 7.5 CVE-2026-42824EPSS 8% Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose infor… Copilot Mitigation only Fix from $1,9502026-06-04 HIGH 7.5 CVE-2026-47644 Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unautho… Copilot Chat Mitigation only Fix from $1,9502026-06-04 HIGH 7.5 CVE-2026-48579 Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network. Exchange Online Mitigation only Fix from $1,9502026-06-04 MEDIUM 6.5 CVE-2026-47655 Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network. Graph No fix yet Fix from $1,6002026-06-04 CRITICAL 9.8 CVE-2026-47280 Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network. Azure Resource Manager No fix yet Fix from $2,3002026-05-22 CRITICAL 10.0 CVE-2026-42901 Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network. Entra Id Mitigation only Fix from $2,3002026-05-22 HIGH 7.5 CVE-2026-42827 Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose infor… 365 Copilot Mitigation only Fix from $1,9502026-05-22 HIGH 7.5 CVE-2026-41104 Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose information over a network. Planetary Computer Mitigation only Fix from $1,9502026-05-22 CRITICAL 9.3 CVE-2026-41090 Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform t… 365 Copilot Mitigation only Fix from $2,3002026-05-22 CRITICAL 9.8 CVE-2026-40412 Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network. Azure Orbital Spatio Mitigation only Fix from $2,3002026-05-22 HIGH 8.8 CVE-2026-40411 Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network. Azure Virtual Network Gateway Mitigation only Fix from $1,9502026-05-22 HIGH 8.8 CVE-2026-35430 Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges ov… Azure Privileged Identity Management Mitigation only Fix from $1,9502026-05-22 CRITICAL 9.8 CVE-2026-33843 Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privilege… Entra Id Mitigation only Fix from $2,3002026-05-22