BaselineWatch
60954 CVEs · 136 in KEV
Desk
CVEs known60,954 New, 24 h120 Changed, 24 h122 In KEV136 Public exploit1,650 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVEs
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-55136 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55041 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55049 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55039 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55029 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55048 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55031 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55025 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55022 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55018 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55024 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55017 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-50467 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-50314 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-50301 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-47642 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-47290 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-58618 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55948 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-55899 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-50675 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 8 h ago
CVE-2026-81948 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81950 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81949 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81953 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81959 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81951 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81388 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81957 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81960 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81956 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81397 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81396 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81954 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81947 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81386 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-81398 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2016 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Sat 31 Oct
CVE-2026-68817 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Fri 30 Oct
CVE-2026-68814 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Fri 30 Oct
CVE-2026-68812 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Fri 30 Oct
CVE-2026-68805 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Fri 30 Oct
CVE-2026-68804 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Fri 30 Oct
CVE-2026-68803 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Fri 30 Oct
CVE-2026-68801 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Fri 30 Oct
CVE-2026-66807 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Fri 30 Oct
CVE-2026-64919 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft access 2016, microsoft access 2016 (32-bit edition) Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. Fri 30 Oct
CVE-2026-64920 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft access 2016, microsoft access 2016 (32-bit edition) Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. Fri 30 Oct
CVE-2026-64915 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. Fri 30 Oct
CVE-2026-64914 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft access 2016, microsoft access 2016 (32-bit edition) Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. Fri 30 Oct
CVE-2026-64908 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft access 2016, microsoft access 2016 (32-bit edition) Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. Fri 30 Oct

250 of 315 · Next · Previous

Download these 315 as CSV · subscribe to this list.

EPSS scores: 2026-11-01. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.