Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-32184 | 7.8 high | 2.0% | microsoft, hpc_pack | Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-45322 | 7.8 high | 2.0% | no CPE yet | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain an OS command injection vulnerability in the shell action replay path. In affected releases, ShellReceiver.run_shell() passes a command string from action parameters directly to subprocess.Popen() with shell=True and executable=powershell.exe. The same shell-execution behavior is also reachable through ShellReceiver.execute_command(). The shell receiver is invoked by action classes such as RunShellCommand.execute() and ExecuteCommand.execute(), which forward stored action parameters to the shell receiver. Because UFO stores planned and executed actions in per-session JSON records, an attacker who can write or modify a session/action JSON file can plant a shell action. When the session is resumed or replayed, UFO executes the attacker's command as the UFO process user. | Mon 26 Oct |
| CVE-2026-32192 | 7.8 high | 2.0% | microsoft, azure_monitor_agent | Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-87692 | 7.8 high | 2.0% | no CPE yet | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. | 19 Oct |
| CVE-2026-96186 | 7.8 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | 16 Oct |
| CVE-2026-50652 | 7.5 high | 2.0% | microsoft, azure active directory, microsoft .net framework 3.5, microsoft .net framework 3.5 and 4.7.2 | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network. | 8 h ago |
| CVE-2026-26171 | 7.5 high | 2.0% | microsoft, .net, powershell | Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network. | Mon 26 Oct |
| CVE-2026-32178 | 7.5 high | 2.0% | microsoft, .net, visual_studio_2022 | Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2026-32203 | 7.5 high | 2.0% | microsoft, .net, visual_studio_2022, visual_studio_2026 | Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network. | Mon 26 Oct |
| CVE-2026-42899 | 7.5 high | 2.0% | microsoft, .net | Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network. | Mon 26 Oct |
| CVE-2026-72923 | 7.5 high | 2.0% | no CPE yet | The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. In Microsoft.OpenApi.Readers versions before 1.6.30 and Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 through 2.11.0 and 3.0.0 through 3.9.0, parsing a YAML OpenAPI document with nested anchors and aliases can consume uncontrolled memory. SharpYaml represents aliases as shared nodes in a small directed acyclic graph, but conversion to independent OpenAPI or System.Text.Json.Nodes.JsonNode trees duplicates every aliased path; without a node-count or nesting-depth limit, N nested anchors referenced k times can require k^N materialized nodes and terminate the process through an out-of-memory condition. The fixed readers bound materialization to 5,000,000 nodes and a nesting depth of 64 by default and report an OpenApiDiagnostic error when a limit is exceeded. This vulnerability is fixed in Microsoft.OpenApi.Readers 1.6.30 and Microsoft.OpenApi.YamlReader 2.12.0 and 3.10.0. | 14 Oct |
| CVE-2026-27908 | 7.0 high | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2025-55693 | 7.0 high | 2.0% | microsoft, windows_11_24h2, windows_11_25h2, windows_server_2025 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. | 18 Oct |
| CVE-2026-62912 | 6.5 medium | 2.0% | microsoft, microsoft exchange server 2016 cumulative update 23, microsoft exchange server 2019 cumulative update 14, microsoft exchange server 2019 cumulative update 15 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network. | 7 h ago |
| CVE-2026-63516 | 6.5 medium | 2.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 8 h ago |
| CVE-2025-53809 | 6.5 medium | 2.0% | microsoft, windows_11_24h2, windows_server_2025 | Improper input validation in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. | 18 Oct |
| CVE-2025-59257 | 6.5 medium | 2.0% | microsoft, windows_11_24h2, windows_11_25h2, windows_server_2022_23h2 | Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network. | 18 Oct |
| CVE-2026-26169 | 6.1 medium | 2.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally. | Sun 25 Oct |
| CVE-2002-1117 | 5.0 medium | 2.0% | symantec_veritas, backup_exec | Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares. | 9 Oct |
| CVE-2026-85889 | 10.0 critical | 1.0% | microsoft, azure ai foundry | Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-70200 | 10.0 critical | 1.0% | microsoft, azure logic apps | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-69865 | 10.0 critical | 1.0% | microsoft, azure container registry | Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-26150 | 10.0 critical | 1.0% | microsoft, purview_ediscovery | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-35431 | 10.0 critical | 1.0% | microsoft, entra_id | Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network. | Mon 26 Oct |
| CVE-2026-35435 | 10.0 critical | 1.0% | microsoft, azure_ai_foundry | Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-45480 | 10.0 critical | 1.0% | microsoft, azure_active_directory | Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network. | Sun 25 Oct |
| CVE-2026-57983 | 10.0 critical | 1.0% | microsoft, edge_chromium | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. | Sun 25 Oct |
| CVE-2026-56162 | 10.0 critical | 1.0% | microsoft, azure_sql_database | Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. | Sat 24 Oct |
| CVE-2026-62836 | 10.0 critical | 1.0% | microsoft, azure_sql_managed_instance | Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network. | Sat 24 Oct |
| CVE-2026-63508 | 10.0 critical | 1.0% | microsoft, planetary_computer | Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network. | Sat 24 Oct |
| CVE-2026-65667 | 10.0 critical | 1.0% | microsoft, teams | Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network. | Sat 24 Oct |
| CVE-2026-56191 | 10.0 critical | 1.0% | microsoft, exchange_online | Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network. | Sat 24 Oct |
| CVE-2026-56163 | 10.0 critical | 1.0% | microsoft, azure_kubernetes_service | Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network. | Sat 24 Oct |
| CVE-2026-57106 | 10.0 critical | 1.0% | microsoft, purview_data_governance | Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network. | Sat 24 Oct |
| CVE-2026-66803 | 10.0 critical | 1.0% | microsoft, azure_cosmos_db | Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network. | Fri 23 Oct |
| CVE-2025-49752 | 10.0 critical | 1.0% | microsoft, azure_bastion_developer | Azure Bastion Elevation of Privilege Vulnerability | 18 Oct |
| CVE-2026-65770 | 10.0 critical | 1.0% | microsoft, azure_managed_instance_for_apache_cassandra | Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-65801 | 10.0 critical | 1.0% | microsoft, exchange_online | Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network. | 18 Oct |
| CVE-2026-65816 | 10.0 critical | 1.0% | microsoft, azure_web_apps | Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network. | 18 Oct |
| CVE-2026-69555 | 10.0 critical | 1.0% | microsoft, azure_arc | Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network. | 18 Oct |
| CVE-2026-69502 | 10.0 critical | 1.0% | microsoft, azure_sql_database | Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. | 15 Oct |
| CVE-2026-96207 | 10.0 critical | 1.0% | microsoft, partner_center | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network. | 15 Oct |
| CVE-2026-83711 | 10.0 critical | 1.0% | microsoft, azure_active_directory_b2c | Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network. | 14 Oct |
| CVE-2026-70352 | 10.0 critical | 1.0% | microsoft, azure_ai_language_authoring | Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network. | 14 Oct |
| CVE-2026-57092 | 9.9 critical | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network. | 7 h ago |
| CVE-2026-85885 | 9.9 critical | 1.0% | microsoft, microsoft 365 copilot | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-83941 | 9.9 critical | 1.0% | microsoft, microsoft entra | Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-21515 | 9.9 critical | 1.0% | microsoft, azure_iot_central | Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-33109 | 9.9 critical | 1.0% | microsoft, azure_managed_instance_for_apache_cassandra | Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network. | Mon 26 Oct |
| CVE-2026-33821 | 9.9 critical | 1.0% | microsoft, dynamics_365_customer_insights | Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network. | Mon 26 Oct |
Download these 1000 as CSV (the first thousand in this order) · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.