Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-96245 | 7.5 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | 16 Oct |
| CVE-2026-87716 | 7.5 high | 1.0% | microsoft, windows_10_1809, windows_10_21h2, windows_10_22h2 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network. | 16 Oct |
| CVE-2026-96248 | 7.5 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2016 | Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network. | 16 Oct |
| CVE-2026-83635 | 7.5 high | 1.0% | microsoft, windows_server_2012, windows_server_2016, windows_server_2019 | Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. | 16 Oct |
| CVE-2026-96945 | 7.5 high | 1.0% | microsoft, windows_server_2019, windows_server_2022, windows_server_2025 | Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. | 16 Oct |
| CVE-2026-88207 | 7.5 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-70281 | 7.5 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | 15 Oct |
| CVE-2026-105715 | 7.5 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-105599 | 7.5 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-105592 | 7.5 high | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-105714 | 7.5 high | 1.0% | microsoft, 365_apps, office_2021, office_2024 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-33096 | 7.5 high | 1.0% | microsoft, windows_11_23h2, windows_11_24h2, windows_11_25h2 | Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network. | 14 Oct |
| CVE-2025-64666 | 7.5 high | 1.0% | microsoft, exchange_server, exchange_server_subscription_edition | Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | 14 Oct |
| CVE-2026-97830 | 7.5 high | 1.0% | microsoft, windows_11_23h2, windows_11_24h2, windows_11_25h2 | Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. | 14 Oct |
| CVE-2026-70251 | 7.5 high | 1.0% | microsoft, sharepoint_server | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 14 Oct |
| CVE-2026-70202 | 7.5 high | 1.0% | microsoft, sharepoint_server | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 14 Oct |
| CVE-2026-88206 | 7.5 high | 1.0% | microsoft, sharepoint_server | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 14 Oct |
| CVE-2025-66389 | 7.5 high | 1.0% | microsoft, github_copilot | GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection. | 12 Oct |
| CVE-2026-105791 | 7.5 high | 1.0% | no CPE yet | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run_shell tool in the CommandLineExecutor component of ufo/client/mcp/local_servers/cli_mcp_server.py validates only the first token of the bash_command parameter and permits explorer.exe. On Windows, explorer.exe delegates its following path argument to ShellExecute, so an attacker-influenced agent call can launch an arbitrary executable or script as the desktop user even though the subprocess uses shell=False. Exploitation depends on a user running an affected agent workflow and on inducing the tool call, but successful execution can access or modify that user's files, tokens, and sessions. This issue is fixed in version 3.0.9. | 9 Oct |
| CVE-2026-118147 | 7.4 high | 1.0% | microsoft, microsoft visual studio 2017 version 15.9, microsoft visual studio 2019 version 16.11, microsoft visual studio 2022 version 17.14 | Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network. | Sat 31 Oct |
| CVE-2026-96187 | 7.4 high | 1.0% | microsoft, microsoft edge (chromium-based) | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | Sat 31 Oct |
| CVE-2026-84003 | 7.4 high | 1.0% | microsoft, microsoft authentication library | Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network. | Sat 31 Oct |
| CVE-2026-81383 | 7.4 high | 1.0% | microsoft, visual studio code | Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network. | Sat 31 Oct |
| CVE-2026-78461 | 7.4 high | 1.0% | microsoft, visual studio code | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | Sat 31 Oct |
| CVE-2026-58612 | 7.4 high | 1.0% | microsoft, powershell 7.4, powershell 7.5, powershell 7.6 | Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network. | Fri 30 Oct |
| CVE-2026-83511 | 7.4 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2012 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | Wed 28 Oct |
| CVE-2026-41615 | 7.4 high | 1.0% | microsoft, authenticator | Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network. | Mon 26 Oct |
| CVE-2026-45539 | 7.4 high | 1.0% | no CPE yet | Microsoft APM is an open-source, community-driven dependency manager for AI agents. From 0.5.4 to 0.12.4, two primitive integrators in apm-cli enumerate package files with bare Path.glob() / Path.rglob() calls and read each match with Path.read_text(), transparently following symbolic links. A symlink committed inside a remote APM dependency under .apm/prompts/<x>.prompt.md or .apm/agents/<x>.agent.md is preserved verbatim into apm_modules/ on clone and then dereferenced during integration, with the resolved content written as a regular file into the project's deploy directories. The package content_hash, the pre-deploy SecurityGate scan, and apm audit do not flag this. The deploy roots are not added to the auto-generated .gitignore, so the resulting files are staged by git add by default. This vulnerability is fixed in 0.13.0. | Mon 26 Oct |
| CVE-2026-41107 | 7.4 high | 1.0% | microsoft, edge_chromium | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | 26 Oct |
| CVE-2026-57991 | 7.4 high | 1.0% | microsoft, edge_chromium | Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | 25 Oct |
| CVE-2026-57993 | 7.4 high | 1.0% | microsoft, edge_chromium | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 25 Oct |
| CVE-2026-57990 | 7.4 high | 1.0% | microsoft, edge_chromium | Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | 24 Oct |
| CVE-2026-65802 | 7.4 high | 1.0% | microsoft, edge_chromium | External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. | 23 Oct |
| CVE-2026-96222 | 7.4 high | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_server_2012 | Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. | 22 Oct |
| CVE-2026-85922 | 7.4 high | 1.0% | microsoft, azure-keyvault-administration, azure-keyvault-certificates, azure-keyvault-keys | Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network. | 16 Oct |
| CVE-2026-105013 | 7.4 high | 1.0% | microsoft, sharepoint_server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 14 Oct |
| CVE-2026-62906 | 7.4 high | 1.0% | microsoft, discovery_studio | Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network. | 14 Oct |
| CVE-2026-55126 | 7.3 high | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 15 h ago |
| CVE-2026-55034 | 7.3 high | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 15 h ago |
| CVE-2026-55021 | 7.3 high | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 15 h ago |
| CVE-2026-64900 | 7.3 high | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Fri 30 Oct |
| CVE-2026-70355 | 7.3 high | 1.0% | microsoft, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Fri 30 Oct |
| CVE-2026-35433 | 7.3 high | 1.0% | microsoft, .net_framework, .net | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2025-54116 | 7.3 high | 1.0% | microsoft, windows_10_1507, windows_10_1607, windows_10_1809 | Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally. | 18 Oct |
| CVE-2025-55247 | 7.3 high | 1.0% | microsoft, .net | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | 18 Oct |
| CVE-2026-88204 | 7.3 high | 1.0% | microsoft, sharepoint_server | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14 Oct |
| CVE-2022-26921 | 7.3 high | 1.0% | microsoft, visual_studio_code | Visual Studio Code Elevation of Privilege Vulnerability | 8 Oct |
| CVE-2026-81349 | 7.2 high | 1.0% | microsoft, azure hdinsight | Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network. | Sat 31 Oct |
| CVE-2026-62910 | 7.2 high | 1.0% | microsoft, microsoft exchange server 2016 cumulative update 23, microsoft exchange server 2019 cumulative update 14, microsoft exchange server 2019 cumulative update 15 | Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | Fri 30 Oct |
| CVE-2026-35425 | 7.2 high | 1.0% | microsoft, azure_api_management | Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network. | 24 Oct |
1250 of 3810 · Next · Previous
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-11-01. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.