Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-64916 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 5 h ago |
| CVE-2026-64902 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 5 h ago |
| CVE-2026-64897 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 5 h ago |
| CVE-2026-64922 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 5 h ago |
| CVE-2026-62826 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Wed 28 Oct |
| CVE-2026-55135 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Wed 28 Oct |
| CVE-2026-55030 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Wed 28 Oct |
| CVE-2026-55020 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Wed 28 Oct |
| CVE-2026-55019 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Wed 28 Oct |
| CVE-2026-55016 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Wed 28 Oct |
| CVE-2026-62882 | 4.3 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office ltsc 2021 | Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. | 5 h ago |
| CVE-2026-40421 | 4.3 medium | 1.0% | microsoft, 365_apps, office, office_long_term_servicing_channel | Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Mon 26 Oct |
| CVE-2025-60728 | 4.3 medium | 1.0% | microsoft, 365_apps, office_long_term_servicing_channel | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 18 Oct |
| CVE-2026-61072 | 9.9 critical | 0.00% | oracle, peoplesoft_enterprise_fin_staffing_front_office_brazil | Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil product of Oracle PeopleSoft (component: Staffing). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Staffing Front Office Brazil. While the vulnerability is in PeopleSoft Enterprise FIN Staffing Front Office Brazil, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Staffing Front Office Brazil. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). | Sat 24 Oct |
| CVE-2026-62120 | 9.8 critical | 0.00% | no CPE yet | Unauthenticated PHP Object Injection in Law Office <= 3.20 versions. | 13 Oct |
| CVE-2026-33755 | 8.8 high | 0.00% | intermesh, group-office | Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.158, 25.0.92, and 26.0.17, an authenticated SQL Injection vulnerability in the JMAP `Contact/query` endpoint allows any authenticated user with basic addressbook access to extract arbitrary data from the database — including active session tokens of other users. This enables full account takeover of any user, including the System Administrator, without knowing their password. Versions 6.8.158, 25.0.92, and 26.0.17 fix the issue. | Mon 26 Oct |
| CVE-2026-35436 | 8.8 high | 0.00% | microsoft, 365_apps, office, office_long_term_servicing_channel | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-40420 | 8.8 high | 0.00% | microsoft, 365_apps, office, office_long_term_servicing_channel | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. | Mon 26 Oct |
| CVE-2026-107248 | 8.8 high | 0.00% | no CPE yet | Thelia 3.0.0's back-office Email/Messages feature contains a server‑side template injection (SSTI) flaw that allows any authenticated user with the “Messages” permission to supply unsandboxed Twig templates, which are then compiled and executed as raw code. By modifying Message content, an attacker can execute arbitrary PHP functions, read sensitive files, and potentially write to the filesystem, leading to full compromise of the application and underlying host. This vulnerability has been patched in thelia/twig-engine-module 1.0.9. | 15 Oct |
| CVE-2026-109397 | 8.6 high | 0.00% | no CPE yet | Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted file upload vulnerability that allows authenticated back-office users to upload PHP files by appending a trailing space to filenames. FileProcessorService validates the raw filename but FileManager::sanitizeFileName() strips the space, storing an executable .php file under public/cache/documents/ for code execution as the web server user. | 13 Oct |
| CVE-2026-100640 | 8.6 high | 0.00% | no CPE yet | SiYuan before v3.8.4 contains an authorization omission in the siyuan-get IPC handler that allows remote-kernel renderers to access native clipboard formats by invoking clipboardReadMathML, clipboardReadOffice, and clipboardReadWPS commands with matching plaintext. Attackers controlling remote renderer content can obtain MathML formulas, Office bytes, and WPS bytes from local clipboard during user-mediated paste operations. | 8 Oct |
| CVE-2025-67719 | 8.5 high | 0.00% | no CPE yet | Ibexa is a composable end-to-end DXP (Digital Experience Platform). Versions 5.0.0-beta1 through 5.0.3 do not have password validation. During the transition from v4 to v5 an error was introduced into validation code which causes the validation of the previous password not to run as expected. This makes it possible for a logged in user to change their password in the back office without knowing the previous password. For example, if a user logs into their account and walks away without locking their workstation, an attacker could access the unattended session and change the password, therefore locking the legitimate user out. This issue is fixed in version 5.0.4. | 8 Oct |
| CVE-2026-70130 | 8.4 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office ltsc 2021 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-55045 | 8.4 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | Wed 28 Oct |
| CVE-2026-32190 | 8.4 high | 0.00% | microsoft, 365_apps, office, office_long_term_servicing_channel | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | Mon 26 Oct |
| CVE-2026-40358 | 8.4 high | 0.00% | microsoft, 365_apps, office, office_long_term_servicing_channel | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | Mon 26 Oct |
| CVE-2026-40363 | 8.4 high | 0.00% | microsoft, 365_apps, 365_copilot, office | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | Mon 26 Oct |
| CVE-2026-40366 | 8.4 high | 0.00% | microsoft, 365_apps, office, office_long_term_servicing_channel | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Mon 26 Oct |
| CVE-2026-40367 | 8.4 high | 0.00% | microsoft, 365_apps, office, office_long_term_servicing_channel | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Mon 26 Oct |
| CVE-2026-100208 | 8.1 high | 0.00% | microsoft, 365_apps, office_2021, office_2024 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | Wed 28 Oct |
| CVE-2026-68817 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-68814 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-68812 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-68805 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-68804 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-68803 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-68801 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-66807 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-64919 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft access 2016, microsoft access 2016 (32-bit edition) | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-64920 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft access 2016, microsoft access 2016 (32-bit edition) | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-64915 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-64914 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft access 2016, microsoft access 2016 (32-bit edition) | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-64908 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft access 2016, microsoft access 2016 (32-bit edition) | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-64911 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-64912 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft access 2016, microsoft access 2016 (32-bit edition) | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-64910 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-64909 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-64907 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-64905 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 5 h ago |
| CVE-2026-64904 | 7.8 high | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. | 5 h ago |
Download these 584 as CSV · subscribe to this list.
EPSS scores: 2026-10-29. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.