Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-97768 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97767 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97766 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97765 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97763 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97762 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97758 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97757 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97756 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97755 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97754 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97753 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97752 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97751 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97750 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97748 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97747 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97746 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97742 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97739 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97738 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97017 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97010 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97008 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97007 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97004 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-97003 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-105718 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-100212 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2026-100210 | 8.8 high | 1.0% | microsoft, 365_apps, microsoft_365, office_2021 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 15 Oct |
| CVE-2025-62210 | 8.7 high | 1.0% | microsoft, dynamics_365 | Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network. | 18 Oct |
| CVE-2025-62211 | 8.7 high | 1.0% | microsoft, dynamics_365 | Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (online) allows an authorized attacker to perform spoofing over a network. | 18 Oct |
| CVE-2025-54896 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-54898 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-54900 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-54902 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-54903 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-54904 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-59231 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-59233 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-60727 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-62200 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-62201 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-62203 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-62556 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14 Oct |
| CVE-2025-62560 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14 Oct |
| CVE-2025-62561 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14 Oct |
| CVE-2025-62563 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14 Oct |
| CVE-2025-62564 | 7.8 high | 1.0% | microsoft, 365_apps, excel, office | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14 Oct |
| CVE-2026-55488 | 7.7 high | 1.0% | no CPE yet | motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Versions prior to 0.44.0 contain an absolute path traversal vulnerability in multiple media file handlers that allows an attacker to read arbitrary files from the filesystem. The affected handlers accept a user-controlled filename parameter and construct filesystem paths using `os.path.join()`. When an absolute path is supplied, Python discards the configured media directory and returns the attacker-supplied path directly. The application then bypasses Tornado's built-in path validation by overriding the relevant safety checks. As a result, an attacker can access files outside of the configured camera media directory, subject to the permissions of the motionEye process. Version 0.44.0 fixes the issue. | Sun 25 Oct |
Download these 569 as CSV · subscribe to this list.
EPSS scores: 2026-10-27. NVD cursor: 2026-10-28 22:21. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.