Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

365 Apps MEDIUM 5.5
CVE-2026-56195

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Patch available
Fix from $1,600 2026-07-14
Windows 10 1607 HIGH 8.4
CVE-2026-56189

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Windows 10 1607 HIGH 8.1
CVE-2026-56188

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized a…

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Windows 11 24h2 HIGH 7.8
CVE-2026-56187

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Fix: 10.0.26100.8875 / 10.0.26200.8875+
Fix from $1,950 2026-07-14
Windows 11 24h2 HIGH 7.0
CVE-2026-56183

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Fix: 10.0.26100.8875 / 10.0.26200.8875+
Fix from $1,950 2026-07-14
Windows 10 1607 MEDIUM 6.5
CVE-2026-56186

Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,600 2026-07-14
Windows 10 21h2 MEDIUM 5.5
CVE-2026-56184

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.

Fix: 10.0.19044.7548 / 10.0.19045.7548+
Fix from $1,600 2026-07-14
Windows 10 1607 HIGH 7.8
CVE-2026-56182

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Windows 11 24h2 HIGH 8.3
CVE-2026-56181

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.

Fix: 10.0.26100.8875 / 10.0.26100.33158+
Fix from $1,950 2026-07-14
Windows 10 1607 HIGH 7.8
CVE-2026-56175

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Windows 10 1607 HIGH 7.8
CVE-2026-56176

Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Windows 10 1809 HIGH 7.0
CVE-2026-56173

Use after free in Windows WebView allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.9020 / 10.0.19044.7548+
Fix from $1,950 2026-07-14
Defender For Endpoint HIGH 7.0
CVE-2026-56178

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

Fix: 101.26042.0020+
Fix from $1,950 2026-07-14
Windows 10 21h2 MEDIUM 6.5
CVE-2026-56168

Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network.

Fix: 10.0.19044.7548 / 10.0.19045.7548+
Fix from $1,600 2026-07-14
Windows 10 1607 CRITICAL 9.8
CVE-2026-56159

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $2,300 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55947

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20175+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55949

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20175+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-56156

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2026-07-14
Sharepoint Server MEDIUM 5.4
CVE-2026-56157

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-14
Dynamics Nav CRITICAL 9.8
CVE-2026-55944

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.

Patch available
Fix from $2,300 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55141

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20175+
Fix from $1,950 2026-07-14
Copilot HIGH 7.1
CVE-2026-55145

Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampe…

Mitigation only
Fix from $1,950 2026-07-14
365 Apps HIGH 7.1
CVE-2026-55898

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Fix: 16.0.10417.20175+
Fix from $1,950 2026-07-14
365 Apps MEDIUM 5.5
CVE-2026-55142

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55133

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55134

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Fix: 16.0.19725.20434+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55136

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20175+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55137

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20175+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55140

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Patch available
Fix from $1,950 2026-07-14
365 Apps MEDIUM 5.5
CVE-2026-55138

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Fix: 16.0.10417.20175+
Fix from $1,600 2026-07-14