Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-111497KEVexploit ×90news ×11 | 9.2 critical | 83.0% | google, nodejs, brotli, node.js, brotlicffi | A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. | Wed 28 Oct |
| CVE-2026-55040KEVexploit ×5 | 9.1 critical | 70.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. | 16 h ago |
| CVE-2026-50522KEVexploit ×5 | 9.8 critical | 3.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 16 h ago |
| CVE-2026-58644KEV | 9.8 critical | 16.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 16 h ago |
| CVE-2026-41089exploit ×13 | 9.8 critical | 80.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2025-55315exploit ×8 | 9.9 critical | 67.0% | microsoft, asp.net_core, visual_studio_2022 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. | 18 Oct |
| CVE-2025-64095exploit ×2 | 9.8 critical | 47.0% | dnnsoftware, dotnetnuke | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 10.1.1, the default HTML editor provider allows unauthenticated file uploads and images can overwrite existing files. An unauthenticated user can upload and replace existing files allowing defacing a website and combined with other issue, injection XSS payloads. This vulnerability is fixed in 10.1.1. | 18 Oct |
| CVE-2015-2468exploit | 9.3 high | 43.0% | microsoft, office, office_compatibility_pack, sharepoint_server | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | 14 Oct |
| CVE-2015-2467exploit | 9.3 high | 28.0% | microsoft, office | Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | 9 Oct |
| CVE-2015-2470exploit | 9.3 high | 27.0% | microsoft, office, word, word_viewer | Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Integer Underflow Vulnerability." | 14 Oct |
| CVE-2015-2469exploit | 9.3 high | 27.0% | microsoft, office, word | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | 14 Oct |
| CVE-2026-73296exploit ×2 | 9.4 critical | 4.0% | no CPE yet | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8. | 24 Oct |
| CVE-2025-54914exploit ×2 | 9.8 critical | 3.0% | microsoft, azure_networking | Azure Networking Elevation of Privilege Vulnerability | 18 Oct |
| CVE-2026-69836exploit ×2 | 10.0 critical | 2.0% | microsoft, entra_id | Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-55944exploit | 9.8 critical | 2.0% | microsoft, dynamics_nav | Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network. | 24 Oct |
| CVE-2026-56190exploit ×3 | 9.8 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network. | 16 h ago |
| CVE-2026-62878exploit | 9.8 critical | 1.0% | microsoft, windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 | Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. | Fri 30 Oct |
| CVE-2025-62821exploit | 9.1 critical | 1.0% | microsoft, heif_image_extension | Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copy_size = stride * abs(roi_height) but does not check the source buffer length before a memmove call. | 12 Oct |
| CVE-2025-66390exploit | 9.8 critical | 0.00% | no CPE yet | In Microsoft Azure API Management through 2025-10-17, when self-service signup (username/password Basic Authentication) is enabled in Tenant A, an attacker can reuse the registration flow by changing the hostname or tenant identifier to Tenant B, even when Tenant B has signup disabled at the UI level. In other words, disabling signup in the UI does not disable the underlying API endpoint (which still accepts cross-tenant requests based on the Host header). NOTE: The supplier states that they evaluated the report and determined it did not cross a security boundary (i.e., the observed behavior was a configuration/state issue rather than an exploitable product vulnerability affecting tenant isolation). NOTE: The supplier evaluated this report and determined that it did not cross a security boundary (i.e., the observed behavior was a configuration/state issue rather than an exploitable product vulnerability affecting tenant isolation). | 12 Oct |
| CVE-2015-6093 | 9.3 high | 23.0% | microsoft, office, office_web_apps, office_web_apps_server | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." | 14 Oct |
| CVE-2012-2524 | 9.3 high | 20.0% | microsoft, office | Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerability." | 9 Oct |
| CVE-2015-0085 | 9.3 high | 19.0% | microsoft, excel, excel_viewer, office | Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 Gold and SP1, Word 2013 Gold and SP1, Office 2013 RT Gold and SP1, Word 2013 RT Gold and SP1, Excel Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Excel Services on SharePoint Server 2013 Gold and SP1, Word Automation Services on SharePoint Server 2013 Gold and SP1, Web Applications 2010 SP2, Office Web Apps Server 2010 SP2, Web Apps Server 2013 Gold and SP1, SharePoint Server 2007 SP3, Windows SharePoint Services 3.0 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Foundation 2013 Gold and SP1, and SharePoint Server 2013 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability." | 14 Oct |
| CVE-2015-2466 | 9.3 high | 17.0% | microsoft, office | Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka "Microsoft Office Remote Code Execution Vulnerability." | 9 Oct |
| CVE-2015-2477 | 9.3 high | 14.0% | microsoft, office, word_viewer | Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | 14 Oct |
| CVE-2015-1683 | 9.3 high | 14.0% | microsoft, office | Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | 14 Oct |
| CVE-2026-40372 | 9.1 critical | 11.0% | microsoft, asp.net_core | Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2025-59246 | 9.8 critical | 8.0% | microsoft, entra_id | Azure Entra ID Elevation of Privilege Vulnerability | 8 Oct |
| CVE-2026-41103 | 9.1 critical | 5.0% | microsoft, confluence_saml_sso, jira_saml_sso | Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2025-55241 | 10.0 critical | 2.0% | microsoft, entra_id | Azure Entra ID Elevation of Privilege Vulnerability | 18 Oct |
| CVE-2026-50515 | 9.9 critical | 2.0% | microsoft, azure_service_bus | Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network. | 24 Oct |
| CVE-2026-50517 | 9.9 critical | 2.0% | microsoft, 365_copilot | Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network. | 24 Oct |
| CVE-2026-54118 | 9.8 critical | 2.0% | microsoft, microsoft sql server 2016 service pack 3 (gdr), microsoft sql server 2016 service pack 3 azure connect feature pack, microsoft sql server 2017 (cu 31) | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. | 16 h ago |
| CVE-2026-54117 | 9.8 critical | 2.0% | microsoft, microsoft sql server 2025 (cu 6), microsoft sql server 2025 for x64-based systems (gdr) | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. | 16 h ago |
| CVE-2026-59124 | 9.8 critical | 2.0% | microsoft, windows_app | Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network. | 24 Oct |
| CVE-2026-105016 | 9.8 critical | 2.0% | no CPE yet | Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | 22 Oct |
| CVE-2026-70242 | 9.8 critical | 2.0% | microsoft, 365_apps, office_2021, office_2024 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2025-54539 | 9.8 critical | 2.0% | apache, activemq_nms_amqp | A Deserialization of Untrusted Data vulnerability exists in the Apache ActiveMQ NMS AMQP Client. This issue affects all versions of Apache ActiveMQ NMS AMQP up to and including 2.3.0, when establishing connections to untrusted AMQP servers. Malicious servers could exploit unbounded deserialization logic present in the client to craft responses that may lead to arbitrary code execution on the client side. Although version 2.1.0 introduced a mechanism to restrict deserialization via allow/deny lists, the protection was found to be bypassable under certain conditions. In line with Microsoft’s deprecation of binary serialization in .NET 9, the project is evaluating the removal of .NET binary serialization support from the NMS API entirely in future releases. Mitigation and Recommendations: Users are strongly encouraged to upgrade to version 2.4.0 or later, which resolves the issue. Additionally, projects depending on NMS-AMQP should migrate away from .NET binary serialization as part of a long-term hardening strategy. | 9 Oct |
| CVE-2025-59247 | 9.8 critical | 2.0% | microsoft, azure_playfab | Azure PlayFab Elevation of Privilege Vulnerability | 8 Oct |
| CVE-2026-69843 | 10.0 critical | 1.0% | microsoft, microsoft fabric | Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network. | Sat 31 Oct |
| CVE-2026-85889 | 10.0 critical | 1.0% | microsoft, azure ai foundry | Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network. | Sat 31 Oct |
| CVE-2026-70200 | 10.0 critical | 1.0% | microsoft, azure logic apps | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. | Sat 31 Oct |
| CVE-2026-69865 | 10.0 critical | 1.0% | microsoft, azure container registry | Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network. | Sat 31 Oct |
| CVE-2026-26150 | 10.0 critical | 1.0% | microsoft, purview_ediscovery | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-35431 | 10.0 critical | 1.0% | microsoft, entra_id | Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2026-35435 | 10.0 critical | 1.0% | microsoft, azure_ai_foundry | Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-45480 | 10.0 critical | 1.0% | microsoft, azure_active_directory | Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network. | 25 Oct |
| CVE-2026-57983 | 10.0 critical | 1.0% | microsoft, edge_chromium | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. | 25 Oct |
| CVE-2026-56162 | 10.0 critical | 1.0% | microsoft, azure_sql_database | Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. | 24 Oct |
| CVE-2026-62836 | 10.0 critical | 1.0% | microsoft, azure_sql_managed_instance | Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network. | 24 Oct |
| CVE-2026-63508 | 10.0 critical | 1.0% | microsoft, planetary_computer | Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network. | 24 Oct |
50 of 258 · Next
Download these 258 as CSV · subscribe to this list.
EPSS scores: 2026-11-01. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.