Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-50678 | 6.6 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | Wed 28 Oct |
| CVE-2025-65089 | 6.5 medium | 0.00% | xwiki, pro_macros | XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no view rights on a page may see the content of an office attachment displayed with the view file macro. This issue has been patched in version 1.27.0. | 18 Oct |
| CVE-2026-55026 | 6.2 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. | Wed 28 Oct |
| CVE-2026-55898 | 6.1 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | Wed 28 Oct |
| CVE-2026-97783 | 6.1 medium | 0.00% | microsoft, sharepoint_server | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 21 Oct |
| CVE-2026-54988 | 6.1 medium | 0.00% | microsoft, 365_apps, excel, microsoft_365 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 14 Oct |
| CVE-2026-120206 | 5.9 medium | — | thelia, thelia core, thelia back-office default twig template | Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the back office that allows attackers to forge administrative actions because per-session CSRF tokens leak via URL query strings. Attackers can reuse leaked tokens or target the unprotected setToggleVisibilityAction and updatePositionAction to make logged-in administrators delete, hide or reorder catalogue and configuration objects. | 10 h ago |
| CVE-2026-73243 | 5.8 medium | 0.00% | no CPE yet | kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated GET /addTask endpoint in kkFileView is omitted from TrustHostFilter and TrustDirFilter in server/src/main/java/cn/keking/config/WebConfig.java, allowing FileConvertQueueTask to fetch an attacker-selected URL after FileHandlerService#getFileAttribute uses the fullfilename parameter to force an OFFICE, COMPRESS, or CAD type. This issue is fixed in version 5.0.1. | 24 Oct |
| CVE-2026-105713 | 5.7 medium | 0.00% | microsoft, sharepoint_server | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network. | 14 Oct |
| CVE-2026-68843 | 5.5 medium | 0.00% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally. | 11 h ago |
| CVE-2026-77491 | 5.5 medium | 0.00% | microsoft, microsoft office 365 for mac, microsoft office for android, microsoft office ltsc for mac 2021 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. | 11 h ago |
| CVE-2026-69609 | 5.5 medium | 0.00% | microsoft, microsoft office 365 for mac, microsoft office for android, microsoft office ltsc for mac 2021 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. | 11 h ago |
| CVE-2026-66809 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-66810 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-66806 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office ltsc 2021 | Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-70322 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-70323 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-70320 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-70319 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-70325 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-70317 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-70315 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-70316 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-70312 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-68809 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office ltsc 2021 | Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-63521 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office ltsc 2021 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Fri 30 Oct |
| CVE-2026-55139 | 5.5 medium | 0.00% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | Wed 28 Oct |
| CVE-2026-35440 | 5.5 medium | 0.00% | microsoft, 365_apps, office, office_long_term_servicing_channel | Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Mon 26 Oct |
| CVE-2026-41101 | 5.5 medium | 0.00% | microsoft, word | Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. | Mon 26 Oct |
| CVE-2026-41102 | 5.5 medium | 0.00% | microsoft, powerpoint | Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally. | Mon 26 Oct |
| CVE-2026-42832 | 5.5 medium | 0.00% | microsoft, excel, office, office_long_term_servicing_channel | Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally. | Mon 26 Oct |
| CVE-2026-70310 | 5.5 medium | 0.00% | microsoft, 365_apps, microsoft_365, office_2019 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 24 Oct |
| CVE-2025-59229 | 5.5 medium | 0.00% | microsoft, 365_apps, office_long_term_servicing_channel | Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally. | 18 Oct |
| CVE-2026-97744 | 5.5 medium | 0.00% | microsoft, 365_apps, microsoft_365, office_2021 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | 15 Oct |
| CVE-2026-97005 | 5.5 medium | 0.00% | microsoft, 365_apps, microsoft_365, office_2021 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | 15 Oct |
| CVE-2026-97014 | 5.5 medium | 0.00% | microsoft, 365_apps, office_2021, office_2024 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 14 Oct |
| CVE-2025-58286 | 5.5 medium | 0.00% | huawei, harmonyos | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58287 | 5.5 medium | 0.00% | huawei, harmonyos | Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality. | 8 Oct |
| CVE-2025-58288 | 5.5 medium | 0.00% | huawei, harmonyos | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58290 | 5.5 medium | 0.00% | huawei, harmonyos | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58291 | 5.5 medium | 0.00% | huawei, harmonyos | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58292 | 5.5 medium | 0.00% | huawei, harmonyos | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-64313 | 5.5 medium | 0.00% | huawei, harmonyos | Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2026-56157 | 5.4 medium | 0.00% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Wed 28 Oct |
| CVE-2025-30190 | 5.4 medium | 0.00% | no CPE yet | Malicious content at office documents can be used to inject script code when editing a document. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No publicly available exploits are known | 18 Oct |
| CVE-2026-109171 | 5.3 medium | 0.00% | no CPE yet | yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject contracts by calling POST /admin-api/crm/contract/check. Because CrmContractController lacks @PreAuthorize and approver checks are commented out, attackers can approve contracts to alter customer deal and purchase data or reject them to return products to stock. | Mon 26 Oct |
| CVE-2026-109393 | 5.3 medium | 0.00% | no CPE yet | QloApps through 1.7.0 contains an insecure direct object reference vulnerability in back-office AJAX handlers of AdminOrdersController, AdminBookingDocumentController, AdminProductsController and AdminAddHotelController that skip htl_access hotel checks. Hotel-restricted employees can supply other hotels' sequential identifiers to read, upload and delete booking documents and delete rooms, room images and hotel images. | 18 Oct |
| CVE-2026-110226 | 5.3 medium | 0.00% | no CPE yet | QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted back-office employees to create room types under unassigned hotels by supplying an arbitrary id_hotel. Attackers can enumerate all hotels via the unfiltered room type form selector and post foreign hotel IDs to AdminProductsController, creating rooms and inventory under other hotels. | 16 Oct |
| CVE-2026-108750 | 5.3 medium | 0.00% | no CPE yet | OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office documents. Attackers can upload a small ODT, DOCX, or XLSX file whose XML entries decompress to hundreds of megabytes, crashing PHP workers and degrading availability. | 16 Oct |
| CVE-2026-105836 | 5.3 medium | 0.00% | no CPE yet | QloApps through 1.7.0 contains an authorization bypass vulnerability in AdminProductsController::ajaxProcessBulkUpdateRooms that allows hotel-restricted back-office employees to modify rooms of other hotels. Attackers can submit foreign room IDs in the id_rooms parameter to change status, floor, comments, or inactive dates, disrupting availability and bookings. | 16 Oct |
Download these 722 as CSV · subscribe to this list.
EPSS scores: 2026-10-31. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.