[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 414923
> CVE-2026-81954 [HIGH 7.8]
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81953 [HIGH 7.8]
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81952 [HIGH 8.8]
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
> CVE-2026-81951 [HIGH 7.8]
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81950 [HIGH 7.8]
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81949 [HIGH 7.8]
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81948 [HIGH 7.8]
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81947 [HIGH 7.8]
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81824 [MEDIUM 6.3]
The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link.
> CVE-2026-81823 [MEDIUM 6.9]
The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted.
> CVE-2026-81822 [HIGH 8.3]
The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards administrator user.
> CVE-2026-81821 [HIGH 8.3]
The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information.
> CVE-2026-81401 [MEDIUM 5.5]
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
> CVE-2026-81400 [MEDIUM 5.5]
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
> CVE-2026-81399 [MEDIUM 5.5]
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
> CVE-2026-81398 [HIGH 7.8]
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81397 [HIGH 7.8]
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81396 [HIGH 7.8]
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81395 [MEDIUM 5.5]
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
> CVE-2026-81394 [MEDIUM 5.5]
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
> CVE-2026-81393 [MEDIUM 5.5]
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
> CVE-2026-81392 [MEDIUM 5.5]
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
> CVE-2026-81391 [MEDIUM 5.5]
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
> CVE-2026-81390 [MEDIUM 5.5]
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
> CVE-2026-81389 [HIGH 7.0]
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81388 [HIGH 7.8]
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81387 [MEDIUM 5.5]
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
> CVE-2026-81386 [HIGH 7.8]
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
> CVE-2026-81385 [HIGH 8.8]
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
> CVE-2026-81383 [HIGH 7.4]
Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
> CVE-2026-81381 [MEDIUM 6.5]
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
> CVE-2026-81380 [MEDIUM 5.3]
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
> CVE-2026-81379 [HIGH 8.2]
Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
> CVE-2026-81378 [HIGH 8.2]
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
> CVE-2026-81377 [MEDIUM 6.5]
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.
> CVE-2026-81376 [CRITICAL 9.6]
Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
> CVE-2026-81357 [HIGH 8.2]
Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
> CVE-2026-81356 [HIGH 8.2]
Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
> CVE-2026-81355 [HIGH 7.5]
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
> CVE-2026-81354 [HIGH 8.2]
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
> CVE-2026-81353 [HIGH 7.8]
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
> CVE-2026-81352 [HIGH 8.8]
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
> CVE-2026-81349 [HIGH 7.2]
Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.
> CVE-2026-80097 [HIGH 8.6]
Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.
> CVE-2026-80096 [HIGH 8.8]
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
> CVE-2026-80093 [HIGH 7.0]
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
> CVE-2026-80091 [MEDIUM 6.5]
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
> CVE-2026-80090 [MEDIUM 6.5]
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
> CVE-2026-80089 [MEDIUM 6.5]
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
> CVE-2026-80088 [MEDIUM 6.5]
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.