Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-111497KEVexploit ×68news ×12 | 9.2 critical | 88.0% | google, nodejs, brotli, node.js, brotlicffi | A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. | 15 h ago |
| CVE-2026-42897KEVexploit | 6.1 medium | 71.0% | microsoft, exchange_server, exchange_server_subscription_edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2026-32202KEVexploit ×4 | 4.3 medium | 71.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2020-1054KEVexploit ×5 | 7.0 high | 54.0% | microsoft, windows_10_1507, windows_10_1607, windows_10_1709 | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory. | 8 Oct |
| CVE-2026-32201KEVexploit | 6.5 medium | 43.0% | microsoft, sharepoint_server | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2026-65660KEVexploit ×2 | 8.8 high | 8.0% | microsoft, sharepoint_server | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2025-60710KEVexploit ×2 | 7.8 high | 5.0% | microsoft, windows_11_24h2, windows_11_25h2, windows_server_2025 | Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. | 18 Oct |
| CVE-2026-68820KEVexploit ×4 | 7.0 high | 0.00% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-41089exploit ×12 | 9.8 critical | 80.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2004-0230exploit ×7 | 5.0 medium | 80.0% | juniper, microsoft, junos, windows_2000, windows_98 | TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP. | 9 Oct |
| CVE-2011-3389exploit ×2 | 4.3 medium | 73.0% | google, microsoft, chrome, internet_explorer, firefox | The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack. | 9 Oct |
| CVE-2026-55040exploit ×5 | 9.1 critical | 70.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. | 13 h ago |
| CVE-2025-55315exploit ×8 | 9.9 critical | 67.0% | microsoft, asp.net_core, visual_studio_2022 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. | 18 Oct |
| CVE-2016-3357exploit | 7.8 high | 55.0% | microsoft, office, office_web_apps, office_web_apps_server | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server 2013 SP1, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | 15 Oct |
| CVE-2016-3313exploit | 7.8 high | 50.0% | microsoft, office, word_for_mac, word_viewer | Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability." | 15 Oct |
| CVE-2025-64095exploit ×2 | 9.8 critical | 47.0% | dnnsoftware, dotnetnuke | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated user can upload and replace existing files allowing defacing a website and combined with other issue, injection XSS payloads. This vulnerability is fixed in 10.1.1. | 18 Oct |
| CVE-2015-2468exploit | 9.3 high | 43.0% | microsoft, office, office_compatibility_pack, sharepoint_server | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | 14 Oct |
| CVE-2015-2467exploit | 9.3 high | 28.0% | microsoft, office | Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | 9 Oct |
| CVE-2015-2470exploit | 9.3 high | 27.0% | microsoft, office, word, word_viewer | Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Integer Underflow Vulnerability." | 14 Oct |
| CVE-2015-2469exploit | 9.3 high | 27.0% | microsoft, office, word | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | 14 Oct |
| CVE-2025-54897exploit | 8.8 high | 22.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 18 Oct |
| CVE-2023-35636exploit | 6.5 medium | 18.0% | microsoft, 365_apps, office, office_long_term_servicing_channel | Microsoft Outlook Information Disclosure Vulnerability | 8 Oct |
| CVE-2017-8529exploit | 6.5 medium | 14.0% | microsoft, internet_explorer, edge | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allow an attacker to detect specific files on the user's computer when affected Microsoft scripting engines do not properly handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability". | 8 Oct |
| CVE-2021-43891exploit | 7.8 high | 13.0% | microsoft, visual_studio_code | Visual Studio Code Remote Code Execution Vulnerability | 8 Oct |
| CVE-2026-50656exploit ×4 | 7.0 high | 11.0% | microsoft, malware_protection_engine | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ". | Sun 25 Oct |
| CVE-2026-73296exploit | 9.4 critical | 4.0% | no CPE yet | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8. | Sat 24 Oct |
| CVE-2026-33829exploit ×3 | 4.3 medium | 4.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network. | 14 Oct |
| CVE-2026-50522exploit ×5 | 9.8 critical | 3.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 13 h ago |
| CVE-2025-54914exploit ×2 | 9.8 critical | 3.0% | microsoft, azure_networking | Azure Networking Elevation of Privilege Vulnerability | 18 Oct |
| CVE-2026-96940exploit | 8.8 high | 3.0% | microsoft, exchange_server, exchange_server_subscription_edition | Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | 15 Oct |
| CVE-2025-59501exploit | 4.8 medium | 3.0% | microsoft, configuration_manager_2403, configuration_manager_2409, configuration_manager_2503 | Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network. | 18 Oct |
| CVE-2021-43908exploit | 4.3 medium | 3.0% | microsoft, visual_studio_code | Visual Studio Code Spoofing Vulnerability | 8 Oct |
| CVE-2026-69836exploit ×2 | 10.0 critical | 2.0% | microsoft, entra_id | Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-55944exploit | 9.8 critical | 2.0% | microsoft, dynamics_nav | Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-58289exploit | 8.3 high | 2.0% | microsoft, edge_chromium | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | Sun 25 Oct |
| CVE-2026-56190exploit ×2 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network. | 13 h ago |
| CVE-2026-62878exploit | 9.8 critical | 1.0% | microsoft, windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 | Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. | 13 h ago |
| CVE-2025-62821exploit | 9.1 critical | 1.0% | microsoft, heif_image_extension | Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copy_size = stride * abs(roi_height) but does not check the source buffer length before a memmove call. | 12 Oct |
| CVE-2026-54121exploit ×15 | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows server 2012 | Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network. | 13 h ago |
| CVE-2026-50369exploit | 8.8 high | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. | 13 h ago |
| CVE-2026-47301exploit | 8.8 high | 1.0% | microsoft, microsoft configuration manager, microsoft configuration manager 2509, microsoft configuration manager 2603 | Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network. | 13 h ago |
| CVE-2026-54998exploit | 8.8 high | 1.0% | microsoft, exchange_online | Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. | Sun 25 Oct |
| CVE-2026-49179exploit | 8.8 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2025-62222exploit | 8.8 high | 1.0% | microsoft, github_copilot_chat | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-50338exploit | 8.2 high | 1.0% | microsoft, azure_spring_cloud | Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network. | Sat 24 Oct |
| CVE-2026-63520exploit | 8.1 high | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 13 h ago |
| CVE-2026-33827exploit | 8.1 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network. | 14 Oct |
| CVE-2026-62911exploit ×3 | 8.0 high | 1.0% | microsoft, exchange_server, exchange_server_subscription_edition | Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | 14 Oct |
| CVE-2026-69414exploit ×2 | 7.8 high | 1.0% | microsoft, malware_protection_engine | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". | 13 h ago |
| CVE-2026-42826exploit | 7.5 high | 1.0% | microsoft, azure_devops | Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network. | Mon 26 Oct |
50 of 75 · Next
Download these 75 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.