| CVE-2026-55053 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55049 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55048 | 7.8 | — | — | — | microsoft / 365 apps | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55044 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55043 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55041 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55039 | 7.8 | — | — | — | microsoft / 365 apps | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code l | 106d ago |
| CVE-2026-55038 | 7.8 | — | — | — | microsoft / 365 apps | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55037 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55036 | 7.8 | — | — | — | microsoft / 365 apps | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55033 | 7.8 | — | — | — | microsoft / 365 apps | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55032 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55031 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55029 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55025 | 7.8 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized att | 106d ago |
| CVE-2026-55024 | 7.8 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized att | 106d ago |
| CVE-2026-55022 | 7.8 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker | 106d ago |
| CVE-2026-55018 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-55017 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-54131 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-54125 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime all | 106d ago |
| CVE-2026-54124 | 7.8 | — | — | — | microsoft / terminal | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-54115 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges loc | 106d ago |
| CVE-2026-50689 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50688 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50679 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileg | 106d ago |
| CVE-2026-50677 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Media allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50676 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allow | 106d ago |
| CVE-2026-50673 | 7.8 | — | — | — | microsoft / windows 10 1607 | Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50667 | 7.8 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows | 106d ago |
| CVE-2026-50665 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 106d ago |
| CVE-2026-50655 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-50510 | 7.8 | — | — | — | microsoft / github copilot | Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to e | 106d ago |
| CVE-2026-50509 | 7.8 | — | — | — | microsoft / windows 10 1607 | Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to e | 106d ago |
| CVE-2026-50501 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute cod | 106d ago |
| CVE-2026-50499 | 7.8 | — | — | — | microsoft / windows 10 1809 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges | 106d ago |
| CVE-2026-50498 | 7.8 | — | — | — | microsoft / windows 10 1607 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 106d ago |
| CVE-2026-50494 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. | 106d ago |
| CVE-2026-50493 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50488 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Serv | 106d ago |
| CVE-2026-50486 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50484 | 7.8 | — | — | — | microsoft / windows 10 1809 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50480 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to el | 106d ago |
| CVE-2026-50479 | 7.8 | — | — | — | microsoft / windows 10 1809 | Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locall | 106d ago |
| CVE-2026-50478 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50476 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50471 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-50469 | 7.8 | — | — | — | microsoft / windows 10 1809 | Improper link resolution before file access ('link following') in Windows Projected File System allows an authoriz | 106d ago |
| CVE-2026-50467 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-50466 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50462 | 7.8 | — | — | — | microsoft / windows 10 1607 | External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attack | 106d ago |
| CVE-2026-50461 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-50458 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50457 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-50454 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally | 106d ago |
| CVE-2026-50450 | 7.8 | — | — | — | microsoft / windows 10 1809 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wi | 106d ago |
| CVE-2026-50448 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | 106d ago |
| CVE-2026-50441 | 7.8 | — | — | — | microsoft / windows 10 1607 | Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate pri | 106d ago |
| CVE-2026-50440 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Servi | 106d ago |
| CVE-2026-50436 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 106d ago |
