Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
CVSS high ×
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-67384 | 8.8 high | 1.0% | microsoft, microsoft sql server 2017 (cu 31), microsoft sql server 2017 (gdr), microsoft sql server 2019 (cu 32) | Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-78463 | 8.8 high | 1.0% | microsoft, remote desktop client for windows desktop | Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-78439 | 8.8 high | 1.0% | microsoft, microsoft office 365 for mac, microsoft office for android, microsoft office ltsc for mac 2021 | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-77908 | 8.8 high | 1.0% | microsoft, microsoft dynamics 365 customer engagement v9.1 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-77907 | 8.8 high | 1.0% | microsoft, microsoft visual studio 2026 version 18.9 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69282 | 8.8 high | 1.0% | microsoft, microsoft sharepoint server subscription edition | Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69273 | 8.8 high | 1.0% | microsoft, microsoft sharepoint server subscription edition | Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69285 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69268 | 8.8 high | 1.0% | microsoft, microsoft sharepoint server subscription edition | Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-77504 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-72986 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-77495 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69797 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69767 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69778 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft access 2016, microsoft access 2016 (32-bit edition) | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69764 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69759 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69529 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft access 2016, microsoft access 2016 (32-bit edition) | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69724 | 8.8 high | 1.0% | microsoft, microsoft sharepoint server subscription edition | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69742 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office ltsc 2021 | Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69716 | 8.8 high | 1.0% | microsoft, microsoft sharepoint server subscription edition | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 12 h ago |
| CVE-2026-69722 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69686 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69678 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69671 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69649 | 8.8 high | 1.0% | microsoft, raw image extension | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69556 | 8.8 high | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69518 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69355 | 8.8 high | 1.0% | microsoft, microsoft exchange server 2016 cumulative update 23, microsoft exchange server 2019 cumulative update 14, microsoft exchange server 2019 cumulative update 15 | External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-71336 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 r2 | Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-70586 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-70351 | 8.8 high | 1.0% | microsoft, webp image extension | Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69676 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69712 | 8.8 high | 1.0% | microsoft, windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 | Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69860 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69772 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69729 | 8.8 high | 1.0% | microsoft, windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 | Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69628 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69551 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Use after free in Windows DNS allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69495 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69494 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69461 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-69485 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. | 12 h ago |
| CVE-2026-79878 | 8.8 high | 1.0% | no CPE yet | A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted PAPI packets destined to the PAPI UDP port 8211. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system. | 15 h ago |
| CVE-2024-7557 | 8.8 high | 1.0% | red hat, rhoai-2.14-rhel-8, red hat openshift data science (rhods) | A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option to protect models with authentication. However, credentials from one model can be used to access other models and APIs within the same namespace. The exposed ServiceAccount tokens, visible in the UI, can be utilized with oc --token={token} to exploit the elevated view privileges associated with the ServiceAccount, leading to unauthorized access to additional resources. | 17 h ago |
| CVE-2026-74341 | 8.8 high | 1.0% | linux | In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response The firmware response dispatcher copies all synchronous HAL responses into the 4096-byte hal_buf without validating the response length. A response exceeding WCN36XX_HAL_BUF_SIZE causes a heap buffer overflow with firmware-controlled content. Add a bounds check on the response length. | 22 h ago |
| CVE-2026-72382 | 8.8 high | 1.0% | linux | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject undersized DACLs before parsing ACEs parse_dacl() limits the attacker-controlled ACE count by comparing it with the number of minimal ACEs that fit in the DACL size. The DACL size field is 16 bits, but the expression subtracts sizeof(struct smb_acl). Because sizeof() is unsigned, a DACL size smaller than the ACL header underflows to a large size_t. A malicious client can reach this with: SMB2_SET_INFO (InfoType=SMB2_O_INFO_SECURITY) -> smb2_set_info_sec() -> set_info_sec() -> parse_sec_desc() -> parse_dacl() -> init_acl_state(..., 0xffff) -> init_acl_state(..., 0xffff) -> kmalloc_objs(..., 0xffff) Thus a malformed security descriptor can make num_aces pass the guard and drive large temporary ACL state and pointer-array allocations. Reject DACLs smaller than struct smb_acl before doing the subtraction, so the ACE count check cannot be bypassed by the underflow. | 22 h ago |
| CVE-2026-31432 | 8.8 high | 1.0% | linux | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix OOB write in QUERY_INFO for compound requests When a compound request such as READ + QUERY_INFO(Security) is received, and the first command (READ) consumes most of the response buffer, ksmbd could write beyond the allocated buffer while building a security descriptor. The root cause was that smb2_get_info_sec() checked buffer space using ppntsd_size from xattr, while build_sec_desc() often synthesized a significantly larger descriptor from POSIX ACLs. This patch introduces smb_acl_sec_desc_scratch_len() to accurately compute the final descriptor size beforehand, performs proper buffer checking with smb2_calc_max_out_buf_len(), and uses exact-sized allocation + iov pinning. | 22 h ago |
| CVE-2025-21955 | 8.8 high | 1.0% | linux | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent connection release during oplock break notification ksmbd_work could be freed when after connection release. Increment r_count of ksmbd_conn to indicate that requests are not finished yet and to not release the connection. | 22 h ago |
| CVE-2026-116748 | 8.7 high | 1.0% | no CPE yet | Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response and replay it to issue RPC calls, enabling script-torrent-done execution, download-dir changes, or torrent and data deletion. | 8 h ago |
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-10-30. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.