OCTOBER 20, 2026
Live Feed
Vulnerability Register

CVE Database

Synced from NVD, cross-referenced against CISA KEV and EPSS · ordered by last update

153,845 records on file
Page 291 of 5,129
CVE ID Score Description
11d ago
8.2

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

11d ago
7.8

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

11d ago
8.8

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

11d ago
7.2

Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.

11d ago
8.6

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.

11d ago
8.8

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

11d ago
7

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

11d ago
8.8

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

11d ago
8.8

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

11d ago
7.8

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.

11d ago
8.8

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

11d ago
8.4

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

11d ago
8.8

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

11d ago
8.8

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

11d ago
7

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

11d ago
8.8

Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.