BaselineWatch
58182 CVEs · 127 in KEV
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
CVEs known58,182 New, 24 h1,485 Changed, 24 h2,499 In KEV127 Public exploit1,566 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVECVSSEPSSVendor, productDescriptionModified
CVE-2016-0010 7.8 high 21.0% microsoft, excel_for_mac, office, powerpoint_for_mac Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac, PowerPoint 2016 for Mac, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." 15 Oct
CVE-2015-2423 4.3 medium 20.0% microsoft, excel, office, powerpoint Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Visio 2013 RT SP1, Word 2013 RT SP1, and Internet Explorer 7 through 11 allow remote attackers to gain privileges and obtain sensitive information via a crafted command-line parameter to an Office application or Notepad, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Unsafe Command Line Parameter Passing Vulnerability." 14 Oct
CVE-2015-0085 9.3 high 19.0% microsoft, excel, excel_viewer, office Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 Gold and SP1, Word 2013 Gold and SP1, Office 2013 RT Gold and SP1, Word 2013 RT Gold and SP1, Excel Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Excel Services on SharePoint Server 2013 Gold and SP1, Word Automation Services on SharePoint Server 2013 Gold and SP1, Web Applications 2010 SP2, Office Web Apps Server 2010 SP2, Web Apps Server 2013 Gold and SP1, SharePoint Server 2007 SP3, Windows SharePoint Services 3.0 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Foundation 2013 Gold and SP1, and SharePoint Server 2013 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability." 14 Oct
CVE-2016-0012 4.3 medium 11.0% microsoft, excel, office, powerpoint Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office 2016, Excel 2016, PowerPoint 2016, Visio 2016, Word 2016, and Visual Basic 6.0 Runtime allow remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Microsoft Office ASLR Bypass." 15 Oct
CVE-2026-88178 9.8 critical 1.0% microsoft, 365_apps, microsoft_365, office_2021 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 15 Oct
CVE-2026-88144 8.8 high 1.0% microsoft, 365_apps, microsoft_365, office_2021 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 15 Oct
CVE-2026-70215 8.8 high 1.0% microsoft, 365_apps, microsoft_365, office_2021 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 15 Oct
CVE-2025-54908 7.8 high 1.0% microsoft, 365_apps, office, office_long_term_servicing_channel Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. 18 Oct
CVE-2026-88207 7.5 high 1.0% microsoft, 365_apps, microsoft_365, office_2021 Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 15 Oct
CVE-2026-105599 7.5 high 1.0% microsoft, 365_apps, microsoft_365, office_2021 Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. 15 Oct
CVE-2026-108453 6.5 medium 1.0% microsoft, 365_apps, microsoft_365, office_2021 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. 19 Oct
CVE-2026-108454 6.5 medium 1.0% microsoft, 365_apps, microsoft_365, office_2021 Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. 19 Oct
CVE-2026-108455 6.5 medium 1.0% microsoft, 365_apps, microsoft_365, office_2021 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. 19 Oct
CVE-2026-88183 6.5 medium 1.0% microsoft, 365_apps, microsoft_365, office_2021 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. 15 Oct
CVE-2026-88203 6.5 medium 1.0% microsoft, 365_apps, office_2021, office_2024 Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. 15 Oct
CVE-2026-42079 8.6 high 0.00% no CPE yet PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval() of LLM-generated code with builtins in scope. This issue has been patched via commit 418491a. Mon 26 Oct
CVE-2026-70313 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 12 h ago
CVE-2026-55120 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. 12 h ago
CVE-2026-55123 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. 12 h ago
CVE-2026-55043 7.8 high 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. 12 h ago
CVE-2026-32200 7.8 high 0.00% microsoft, 365_apps, office, office_long_term_servicing_channel Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. Mon 26 Oct
CVE-2025-59238 7.8 high 0.00% microsoft, 365_apps, office, office_long_term_servicing_channel Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. 18 Oct
CVE-2025-71427 7.6 high 0.00% no CPE yet Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences. Attackers can steer an AI agent via prompt injection to abuse save_presentation, open_presentation, or manage_image output_path to overwrite any server-writable file or load external files. 14 Oct
CVE-2026-18558 6.4 medium 0.00% no CPE yet The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'embeddoc' shortcode in all versions up to, and including, 2.7.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 13 Oct
CVE-2026-70322 5.5 medium 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 12 h ago
CVE-2026-70320 5.5 medium 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 12 h ago
CVE-2026-70325 5.5 medium 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 12 h ago
CVE-2026-70316 5.5 medium 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 12 h ago
CVE-2026-70312 5.5 medium 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 12 h ago
CVE-2026-68809 5.5 medium 0.00% microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office ltsc 2021 Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 12 h ago
CVE-2026-41102 5.5 medium 0.00% microsoft, powerpoint Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally. Mon 26 Oct
CVE-2026-97744 5.5 medium 0.00% microsoft, 365_apps, microsoft_365, office_2021 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 15 Oct
CVE-2026-97005 5.5 medium 0.00% microsoft, 365_apps, microsoft_365, office_2021 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. 15 Oct
CVE-2026-42080 4.6 medium 0.00% no CPE yet PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, there is an arbitrary file write vulnerability via `save_generated_slides`. This issue has been patched via commit 418491a. Mon 26 Oct
CVE-2026-42078 4.6 medium 0.00% no CPE yet PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdown_table_to_image. This issue has been patched via commit 418491a. Mon 26 Oct

35 of 35

Download these 35 as CSV · subscribe to this list.

EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.