Search

Search Results (413835 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-110046 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-10 6.5 Medium
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-110045 1 Microsoft 1 Sharepoint Server 2026-11-10 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-110044 1 Microsoft 1 Sharepoint Server 2026-11-10 8.8 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-110043 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-10 8.8 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-109505 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-10 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-109504 1 Microsoft 1 Sharepoint Server 2026-11-10 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-109503 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-10 8.8 High
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-109502 1 Microsoft 1 Sharepoint Server 2026-11-10 8.8 High
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-109501 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-10 8.8 High
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-109500 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-10 7.5 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-109499 1 Microsoft 1 Sharepoint Server 2026-11-10 8.8 High
Access of resource using incompatible type ('type confusion') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-109498 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-10 7.5 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-109497 1 Microsoft 1 Sharepoint Server 2026-11-10 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-109496 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-10 8.8 High
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
CVE-2026-109495 1 Microsoft 1 Sharepoint Server 2026-11-10 6.6 Medium
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-109494 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-10 8.8 High
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
CVE-2026-109493 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-10 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-114160 1 Microsoft 1 Azure Managed Grafana 2026-11-10 9.8 Critical
No cwe for this issue in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-112727 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-11-10 8.8 High
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-114161 1 Microsoft 1 Azure Cyclecloud 2026-11-10 7.8 High
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure CycleCloud allows an authorized attacker to elevate privileges locally.