Export limit exceeded: 235535 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (14647 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-81959 1 Microsoft 12 365, 365 Apps, Excel and 9 more 2026-09-10 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-78503 1 Microsoft 15 365 Apps, Microsoft 365, Microsoft Office 365 For Mac and 12 more 2026-09-10 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78520 1 Microsoft 13 365, 365 Apps, Microsoft 365 and 10 more 2026-09-10 6.5 Medium
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-81957 1 Microsoft 15 365 Apps, Excel, Excel 2016 and 12 more 2026-09-10 7.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81388 1 Microsoft 18 365, 365 Apps, Excel and 15 more 2026-09-10 7.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81393 1 Microsoft 14 365 Apps, Excel, Excel 2016 and 11 more 2026-09-10 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-69734 1 Microsoft 12 365, 365 Apps, Microsoft 365 and 9 more 2026-09-10 6.5 Medium
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69671 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-73029 1 Microsoft 6 Microsoft Sql Server 2019 (gdr), Microsoft Sql Server 2022 (gdr), Microsoft Sql Server 2025 For X64-based Systems (gdr) and 3 more 2026-09-09 6.5 Medium
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-72974 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-09-09 6.5 Medium
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-78518 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-09-09 8.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-78509 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 9.8 Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78439 1 Microsoft 4 Office, Office 365, Office Macos 2021 and 1 more 2026-09-09 8.8 High
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69285 1 Microsoft 5 365 Apps, Office 2016, Office 2019 and 2 more 2026-09-09 8.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69759 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69722 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69556 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 8.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-67373 1 Microsoft 1 Sql Server 2025 2026-09-09 8.8 High
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-53600 1 Dignifiedquire 1 Async-tar 2026-09-09 5.3 Medium
async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header (a GNU longname L, a GNU longlink K, or a PAX x/g header) instead of to the next file entry. POSIX requires a PAX extended-header record set to describe the next file entry, never an intervening extension header. Because poll_next_raw (src/archive.rs) threads the buffered PAX records into the size computation of whatever raw header it reads next — and that header can be an intermediary L — the stream cursor is advanced by an attacker-chosen amount when the L body is consumed. The parser then desyncs relative to a POSIX-correct tar parser (e.g. GNU tar), reading subsequent bytes at the wrong block boundary. This issue has been patched in version 0.6.1.
CVE-2026-72975 1 Microsoft 11 365 Apps, Microsoft 365, Microsoft Office 365 For Mac and 8 more 2026-09-09 6.5 Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.