BaselineWatch
58148 CVEs · 127 in KEV
Desk
CVEs known58,148 New, 24 h1,490 Changed, 24 h2,462 In KEV127 Public exploit1,566 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVEs
CVECVSSEPSSVendor, productDescriptionModified
CVE-2023-35311KEV 8.8 high 16.0% microsoft, 365_apps, office_2019, office_2021 Microsoft Outlook Security Feature Bypass Vulnerability 8 Oct
CVE-2026-62870 8.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 10 h ago
CVE-2026-70329 8.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office ltsc 2021 Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. 10 h ago
CVE-2026-65807 8.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. 10 h ago
CVE-2026-50665 7.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55130 7.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office ltsc 2021 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 10 h ago
CVE-2026-55128 7.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 10 h ago
CVE-2026-55134 7.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 10 h ago
CVE-2026-55132 7.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 10 h ago
CVE-2026-55038 7.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 10 h ago
CVE-2026-55055 7.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 10 h ago
CVE-2026-55127 7.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 10 h ago
CVE-2026-55033 7.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. 10 h ago
CVE-2026-55032 7.8 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. 10 h ago
CVE-2026-55125 7.8 high 1.0% microsoft, 365_apps, microsoft_365, office_2016 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 14 Oct
CVE-2026-55122 7.1 high 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-70328 6.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. 10 h ago
CVE-2026-70327 6.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. 10 h ago
CVE-2026-55054 6.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. 10 h ago
CVE-2026-68799 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-68797 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-64917 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-64899 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-63531 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-63530 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-63529 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-63528 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-63524 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-62842 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55121 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-70314 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-70318 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-68808 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-68802 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-63517 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-56195 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-56192 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55042 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55142 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55057 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55035 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55124 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55138 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55050 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55047 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55028 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55027 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55023 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-55046 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 10 h ago
CVE-2026-50408 5.5 medium 1.0% microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. 10 h ago

50 of 164 · Next

Download these 164 as CSV · subscribe to this list.

EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.