Browse CVEs

MEDIUM 6.2 CVE-2026-71389 CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service.… C2pa 0.12.1 / 0.27.6+ Fix from $4,0002026-08-11 HIGH 8.8 CVE-2026-71387 ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. … Coldfusion No fix yet Fix from $4,9002026-08-11 HIGH 8.8 CVE-2026-71386 is affected by a Cross-site Scripting (XSS) vulnerability that could result in arbitrary code execution in the context of the current user. An attack… Coldfusion No fix yet Fix from $4,9002026-08-11 CRITICAL 9.6 CVE-2026-71384 is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability… Coldfusion No fix yet Fix from $5,7502026-08-11 HIGH 7.3 CVE-2026-71383 is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability… Coldfusion No fix yet Fix from $4,9002026-08-11 HIGH 8.1 CVE-2026-71331 Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network. Windows 10 1809 10.0.17763.9121 / 10.0.20348.5440+ Fix from $4,9002026-08-11 HIGH 8.7 CVE-2026-70355 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20522+ Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-70354 Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. Visual Studio 2022 8.0.30 / 9.0.19+ Fix from $4,9002026-08-11 MEDIUM 5.5 CVE-2026-70348 Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally. Windows 11 24h2 10.0.26100.9106 / 10.0.26200.9106+ Fix from $4,0002026-08-11 HIGH 7.8 CVE-2026-70347 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9418 / 10.0.17763.9115+ Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-70346 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9418 / 10.0.17763.9115+ Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-70345 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9418 / 10.0.17763.9115+ Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-70344 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9418 / 10.0.17763.9115+ Fix from $4,9002026-08-11 HIGH 8.8 CVE-2026-70340 Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. Azure Cyclecloud 8.9.1+ Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-70338 Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locall… Powershell 7.4.19.0 / 7.5.10.0+ Fix from $4,9002026-08-11 HIGH 8.8 CVE-2026-70337 Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network. Powershell 7.4.19.0 / 7.5.10.0+ Fix from $4,9002026-08-11 HIGH 8.8 CVE-2026-70336 Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. Visual Studio Code 1.132.1+ Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-70335 Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unautho… Visual Studio Code 1.132.1+ Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-70330 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.9418 / 10.0.17763.9121+ Fix from $4,9002026-08-11 HIGH 8.8 CVE-2026-70329 Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 365 Apps Patch available Fix from $4,9002026-08-11 MEDIUM 6.5 CVE-2026-70328 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. 365 Apps Patch available Fix from $4,0002026-08-11 MEDIUM 6.5 CVE-2026-70327 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. 365 Apps Patch available Fix from $4,0002026-08-11 HIGH 8.8 CVE-2026-70326 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Sharepoint Server 16.0.19725.20522+ Fix from $4,9002026-08-11 MEDIUM 5.5 CVE-2026-70325 Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 HIGH 8.8 CVE-2026-70324 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Sharepoint Server 16.0.19725.20522+ Fix from $4,9002026-08-11 MEDIUM 5.5 CVE-2026-70323 Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70322 Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 HIGH 8.8 CVE-2026-70321 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server 16.0.19725.20522+ Fix from $4,9002026-08-11 MEDIUM 5.5 CVE-2026-70320 Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-70319 Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11