Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2016-0012 | 4.3 medium | 11.0% | microsoft, excel, office, powerpoint | Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office 2016, Excel 2016, PowerPoint 2016, Visio 2016, Word 2016, and Visual Basic 6.0 Runtime allow remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Microsoft Office ASLR Bypass." | 15 Oct |
| CVE-2025-59246 | 9.8 critical | 8.0% | microsoft, entra_id | Azure Entra ID Elevation of Privilege Vulnerability | 8 Oct |
| CVE-2015-6117 | 6.1 medium | 7.0% | microsoft, sharepoint_foundation, sharepoint_server | Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different vulnerability than CVE-2016-0011. | 14 Oct |
| CVE-2020-36327 | 8.8 high | 6.0% | bundler, fedoraproject, fedora, package_manager_configurations | Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen, even if the intended choice was a private gem that is a dependency of another private gem that is explicitly depended on by the application. NOTE: it is not correct to use CVE-2021-24105 for every "Dependency Confusion" issue in every product. | 8 Oct |
| CVE-2026-40321 | 8.0 high | 6.0% | dnnsoftware, dotnetnuke | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased if the scripts are run by a power user. Version 10.2.2 patches the issue. | Mon 26 Oct |
| CVE-2026-41103 | 9.1 critical | 5.0% | microsoft, confluence_saml_sso, jira_saml_sso | Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2016-0141 | 6.5 medium | 5.0% | microsoft, office | The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, aka "Microsoft Information Disclosure Vulnerability." | 15 Oct |
| CVE-2016-0011 | 5.4 medium | 5.0% | microsoft, sharepoint_server, sharepoint_foundation | Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different vulnerability than CVE-2015-6117. | 15 Oct |
| CVE-2026-40364 | 8.4 high | 4.0% | microsoft, 365_apps, office, office_long_term_servicing_channel | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Mon 26 Oct |
| CVE-2022-21986 | 7.5 high | 4.0% | microsoft, fedoraproject, .net, visual_studio_2019, visual_studio_2022 | .NET Denial of Service Vulnerability | 8 Oct |
| CVE-2026-70049 | 8.0 high | 3.0% | no CPE yet | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network. | 19 Oct |
| CVE-2025-55694 | 7.8 high | 3.0% | microsoft, windows_11_24h2, windows_11_25h2, windows_server_2025 | Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 18 Oct |
| CVE-2026-88091 | 7.8 high | 3.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 16 Oct |
| CVE-2026-73297 | 6.9 medium | 3.0% | no CPE yet | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, _is_blocked_ip in ufo/utils/url_security.py did not block NAT64 prefixes 64:ff9b::/96 and 64:ff9b:1::/48, the 6to4 prefix 2002::/16, or the Teredo prefix 2001::/32 and did not re-check embedded IPv4 destinations, allowing an unauthenticated remote attacker who can influence URLs processed by validate_url to bypass the SSRF guard and reach cloud metadata, internal services, or localhost. This issue is fixed in version 3.0.8. | Sat 24 Oct |
| CVE-2025-55241 | 10.0 critical | 2.0% | microsoft, entra_id | Azure Entra ID Elevation of Privilege Vulnerability | 18 Oct |
| CVE-2026-50515 | 9.9 critical | 2.0% | microsoft, azure_service_bus | Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-50517 | 9.9 critical | 2.0% | microsoft, 365_copilot | Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-59124 | 9.8 critical | 2.0% | microsoft, windows_app | Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-105016 | 9.8 critical | 2.0% | no CPE yet | Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | Thu 22 Oct |
| CVE-2026-70242 | 9.8 critical | 2.0% | microsoft, 365_apps, office_2021, office_2024 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2025-54539 | 9.8 critical | 2.0% | apache, activemq_nms_amqp | A Deserialization of Untrusted Data vulnerability exists in the Apache ActiveMQ NMS AMQP Client. This issue affects all versions of Apache ActiveMQ NMS AMQP up to and including 2.3.0, when establishing connections to untrusted AMQP servers. Malicious servers could exploit unbounded deserialization logic present in the client to craft responses that may lead to arbitrary code execution on the client side. Although version 2.1.0 introduced a mechanism to restrict deserialization via allow/deny lists, the protection was found to be bypassable under certain conditions. In line with Microsoft’s deprecation of binary serialization in .NET 9, the project is evaluating the removal of .NET binary serialization support from the NMS API entirely in future releases. Mitigation and Recommendations: Users are strongly encouraged to upgrade to version 2.4.0 or later, which resolves the issue. Additionally, projects depending on NMS-AMQP should migrate away from .NET binary serialization as part of a long-term hardening strategy. | 9 Oct |
| CVE-2025-59247 | 9.8 critical | 2.0% | microsoft, azure_playfab | Azure PlayFab Elevation of Privilege Vulnerability | 8 Oct |
| CVE-2026-66808 | 8.8 high | 2.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 5 h ago |
| CVE-2026-64901 | 8.8 high | 2.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 5 h ago |
| CVE-2026-65665 | 8.8 high | 2.0% | microsoft, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 5 h ago |
| CVE-2026-65663 | 8.8 high | 2.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 5 h ago |
| CVE-2026-65658 | 8.8 high | 2.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 5 h ago |
| CVE-2026-63514 | 8.8 high | 2.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 5 h ago |
| CVE-2026-33110 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2026-35439 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2026-40357 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2026-65815 | 8.8 high | 2.0% | microsoft, dynamics_365 | Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-70321 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-66805 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 21 Oct |
| CVE-2025-59237 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-85900 | 8.8 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 14 Oct |
| CVE-2026-32162 | 8.4 high | 2.0% | microsoft, windows_10_1809, windows_10_21h2, windows_10_22h2 | Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2022-24545 | 8.1 high | 2.0% | microsoft, windows_10, windows_11, windows_server_2016 | Windows Kerberos Remote Code Execution Vulnerability | 8 Oct |
| CVE-2022-21991 | 8.1 high | 2.0% | microsoft, visual_studio_code | Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability | 8 Oct |
| CVE-2026-40368 | 8.0 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2025-62204 | 8.0 high | 2.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-27909 | 7.8 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-27914 | 7.8 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-32184 | 7.8 high | 2.0% | microsoft, hpc_pack | Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-45322 | 7.8 high | 2.0% | no CPE yet | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain an OS command injection vulnerability in the shell action replay path. In affected releases, ShellReceiver.run_shell() passes a command string from action parameters directly to subprocess.Popen() with shell=True and executable=powershell.exe. The same shell-execution behavior is also reachable through ShellReceiver.execute_command(). The shell receiver is invoked by action classes such as RunShellCommand.execute() and ExecuteCommand.execute(), which forward stored action parameters to the shell receiver. Because UFO stores planned and executed actions in per-session JSON records, an attacker who can write or modify a session/action JSON file can plant a shell action. When the session is resumed or replayed, UFO executes the attacker's command as the UFO process user. | Mon 26 Oct |
| CVE-2026-32192 | 7.8 high | 2.0% | microsoft, azure_monitor_agent | Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-87692 | 7.8 high | 2.0% | no CPE yet | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. | 19 Oct |
| CVE-2026-96186 | 7.8 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | 16 Oct |
| CVE-2026-26171 | 7.5 high | 2.0% | microsoft, .net, powershell | Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network. | Mon 26 Oct |
| CVE-2026-32178 | 7.5 high | 2.0% | microsoft, .net, visual_studio_2022 | Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-10-27. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.