Vulnerability index

Browse CVEs

377 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Windows 10 1607 HIGH 7.0
CVE-2026-68820 KEV

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9418 / 10.0.17763.9115+
Fix from $4,900 2026-08-11
Sharepoint Server CRITICAL 9.1
CVE-2026-55040 KEV

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

Fix: 16.0.19725.20434+
Fix from $2,300 2026-07-14
Sharepoint Server CRITICAL 9.8
CVE-2026-58644 KEVEPSS 45%

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Fix: 16.0.19725.20434+
Fix from $2,300 2026-07-14
Sharepoint Server CRITICAL 9.8
CVE-2026-56164 KEVEPSS 22%

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

Fix: 16.0.19725.20434+
Fix from $2,300 2026-07-14
Windows 10 1607 HIGH 7.8
CVE-2026-56155 KEV

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locall…

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Sharepoint Server CRITICAL 9.8
CVE-2026-50522 KEVEPSS 77%

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Fix: 16.0.19725.20434+
Fix from $2,300 2026-07-14
Sharepoint Server HIGH 8.8
CVE-2026-45659 KEVEPSS 10%

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20280+
Fix from $1,950 2026-05-22
Defender Antimalware Platform HIGH 7.5
CVE-2026-45498 KEVEPSS 63%

Microsoft Defender Denial of Service Vulnerability

Fix: 4.18.26040.7+
Fix from $1,950 2026-05-20
Malware Protection Engine HIGH 7.8
CVE-2026-41091 KEVEPSS 10%

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Fix: 1.1.26040.8+
Fix from $1,950 2026-05-20
Exchange Server MEDIUM 6.1
CVE-2026-42897 KEVEPSS 70%

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to …

Fix: 15.02.2562.043+
Fix from $1,600 2026-05-14
Defender Antimalware Platform HIGH 7.8
CVE-2026-33825 KEVEPSS 7%

Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Fix: 4.18.26030.3011+
Fix from $1,950 2026-04-14
Windows 10 1607 CRITICAL 9.8
CVE-2026-33824 KEVEPSS 56%

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $2,300 2026-04-14
Sharepoint Server MEDIUM 6.5
CVE-2026-32201 KEVEPSS 23%

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Fix: 16.0.19725.20210+
Fix from $1,600 2026-04-14
Windows 10 1607 HIGH 7.8
CVE-2026-21533 KEV

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.8868 / 10.0.17763.8389+
Fix from $1,950 2026-02-10
Windows 10 1607 HIGH 7.8
CVE-2026-21519 KEV

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.8868 / 10.0.17763.8389+
Fix from $1,950 2026-02-10
Windows 10 1607 MEDIUM 6.2
CVE-2026-21525 KEV

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.

Fix: 10.0.14393.8868 / 10.0.17763.8389+
Fix from $1,600 2026-02-10
Windows 10 1607 HIGH 8.8
CVE-2026-21510 KEVEPSS 26%

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Fix: 10.0.14393.8868 / 10.0.17763.8389+
Fix from $1,950 2026-02-10
Windows 10 1607 HIGH 8.8
CVE-2026-21513 KEVEPSS 15%

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

Fix: 10.0.14393.8868 / 10.0.17763.8389+
Fix from $1,950 2026-02-10
365 Apps HIGH 7.8
CVE-2026-21514 KEV

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

Mitigation only
Fix from $1,950 2026-02-10
365 Apps HIGH 7.8
CVE-2026-21509 KEVEPSS 72%

Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

Mitigation only
Fix from $1,950 2026-01-26
Sharepoint Server CRITICAL 9.8
CVE-2026-20963 KEVEPSS 32%

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

Fix: 16.0.19127.20442+
Fix from $2,300 2026-01-13
Windows 10 1607 MEDIUM 5.5
CVE-2026-20805 KEVEPSS 5%

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.

Fix: 10.0.14393.8783 / 10.0.17763.8276+
Fix from $1,600 2026-01-13
Windows 10 1809 HIGH 7.8
CVE-2025-62221 KEV

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.8146 / 10.0.19044.6691+
Fix from $1,950 2025-12-09
Windows 10 1809 HIGH 7.0
CVE-2025-62215 KEVEPSS 6%

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevat…

Fix: 10.0.17763.8027 / 10.0.19044.6575+
Fix from $1,950 2025-11-11
Windows 11 24h2 HIGH 7.8
CVE-2025-60710 KEV

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges …

Fix: 10.0.26100.7392 / 10.0.26200.7392+
Fix from $1,950 2025-11-11
Windows Server 2012 CRITICAL 9.8
CVE-2025-59287 KEVEPSS 100%

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Fix: 10.0.14393.8524 / 10.0.17763.7922+
Fix from $2,300 2025-10-14
Windows 10 1507 HIGH 7.8
CVE-2025-59230 KEV

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21161 / 10.0.14393.8519+
Fix from $1,950 2025-10-14
Windows 10 1507 HIGH 7.8
CVE-2025-24990 KEVEPSS 6%

Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an…

Fix: 10.0.10240.21161 / 10.0.14393.8519+
Fix from $1,950 2025-10-14
Sharepoint Server CRITICAL 9.8
CVE-2025-53770 KEVEPSS 100%

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsof…

Fix: 16.0.18526.20508+
Fix from $2,300 2025-07-20
Sharepoint Enterprise Server MEDIUM 6.5
CVE-2025-49706 KEVEPSS 100%

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Fix: 16.0.18526.20424+
Fix from $1,600 2025-07-08