| CVE-2026-50413 | 8.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. | 101d ago |
| CVE-2026-50398 | 8.8 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allow | 101d ago |
| CVE-2026-50385 | 8.8 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime all | 101d ago |
| CVE-2026-50382 | 8.8 | — | — | — | microsoft / windows 10 1809 | Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. | 101d ago |
| CVE-2026-50370 | 8.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent | 101d ago |
| CVE-2026-50369 | 8.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a netwo | 101d ago |
| CVE-2026-50360 | 8.8 | — | — | — | microsoft / windows 10 21h2 | Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevat | 101d ago |
| CVE-2026-47295 | 8.8 | — | — | — | microsoft / sql server 2016 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an autho | 101d ago |
| CVE-2026-58608 | 8.8 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spool | 101d ago |
| CVE-2026-57969 | 8.8 | — | — | — | microsoft / azure cyclecloud | Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileg | 101d ago |
| CVE-2026-55005 | 8.8 | — | — | — | microsoft / exchange server | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a netwo | 101d ago |
| CVE-2026-55002 | 8.8 | — | — | — | microsoft / sql server 2016 | External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a net | 101d ago |
| CVE-2026-54999 | 8.8 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allo | 101d ago |
| CVE-2026-54982 | 8.8 | — | — | — | microsoft / windows 10 1607 | Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized atta | 101d ago |
| CVE-2026-54107 | 8.8 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allo | 101d ago |
| CVE-2026-50663 | 8.8 | — | — | — | microsoft / age of empires ii | Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute c | 101d ago |
| CVE-2026-50342 | 8.8 | — | — | — | microsoft / windows 11 24h2 | Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally | 101d ago |
| CVE-2026-49795 | 8.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 101d ago |
| CVE-2026-49178 | 8.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over | 101d ago |
| CVE-2026-48564 | 8.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. | 101d ago |
| CVE-2026-47632 | 8.8 | — | — | — | microsoft / azure connected machine agent | Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privil | 101d ago |
| CVE-2026-57981 | 8.8 | — | — | — | microsoft / edge chromium | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 112d ago |
| CVE-2026-57974 | 8.8 | — | — | — | microsoft / edge chromium | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code | 112d ago |
| CVE-2026-56645 | 8.8 | — | — | — | microsoft / edge chromium | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over | 112d ago |
| CVE-2026-54998 | 8.8 | — | — | — | microsoft / exchange online | Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a ne | 113d ago |
| CVE-2026-47645 | 8.8 | — | — | — | microsoft / 365 copilot | Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorize | 126d ago |
| CVE-2026-32208 | 8.8 | — | — | — | microsoft / edge chromium | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows | 126d ago |
| CVE-2026-47653 | 8.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 136d ago |
| CVE-2026-47289 | 8.8 | — | — | — | microsoft / windows app | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network | 136d ago |
| CVE-2026-45648 | 8.8 | — | — | — | microsoft / windows server 2022 | Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over | 136d ago |
| CVE-2026-45504 | 8.8 | — | — | — | microsoft / exchange server | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privilege | 136d ago |
| CVE-2026-45484 | 8.8 | — | — | — | microsoft / sharepoint server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileg | 136d ago |
| CVE-2026-42985 | 8.8 | — | — | — | microsoft / remote desktop client | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 136d ago |
| CVE-2026-40371 | 8.8 | — | — | — | microsoft / dynamics 365 | Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an auth | 136d ago |
| CVE-2026-32193 | 8.8 | — | — | — | microsoft / azure kubernetes service | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Servi | 136d ago |
| CVE-2026-45659exploited | 8.8 | 2.7% | 3/3 | +40d | microsoft / sharepoint server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code ove | 154d ago |
| CVE-2026-35430 | 8.8 | — | — | — | microsoft / azure privileged identity management | Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorize | 154d ago |
| CVE-2026-45495 | 8.8 | — | — | — | microsoft / edge chromium | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 158d ago |
| CVE-2026-41613 | 8.8 | — | — | — | microsoft / visual studio code | Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. | 164d ago |
| CVE-2026-41109 | 8.8 | — | — | — | microsoft / visual studio code | Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copil | 164d ago |
| CVE-2026-41094 | 8.8 | — | — | — | microsoft / data formulator | Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized atta | 164d ago |
| CVE-2026-41086 | 8.8 | — | — | — | microsoft / windows admin center | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network | 164d ago |
| CVE-2026-40420 | 8.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. | 164d ago |
| CVE-2026-40403 | 8.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally. | 164d ago |
| CVE-2026-40370 | 8.8 | — | — | — | microsoft / sql server 2016 | External control of file name or path in SQL Server allows an authorized attacker to execute code over a network. | 164d ago |
| CVE-2026-40365 | 8.8 | — | — | — | microsoft / sharepoint server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code ove | 164d ago |
| CVE-2026-40357 | 8.8 | — | — | — | microsoft / sharepoint server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code ove | 164d ago |
| CVE-2026-35439 | 8.8 | — | — | — | microsoft / sharepoint server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code ove | 164d ago |
| CVE-2026-35436 | 8.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. | 164d ago |
| CVE-2026-34329 | 8.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adja | 164d ago |
| CVE-2026-33112 | 8.8 | — | — | — | microsoft / sharepoint server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code ove | 164d ago |
| CVE-2026-33110 | 8.8 | — | — | — | microsoft / sharepoint server | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code ove | 164d ago |
| CVE-2026-62836 | 8.7 | — | — | — | microsoft / azure sql managed instance | Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauth | 78d ago |
| CVE-2026-57983 | 8.7 | — | — | — | microsoft / edge chromium | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security fea | 112d ago |
| CVE-2026-69558 | 8.6 | — | — | — | microsoft / partner center | Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to di | 64d ago |
| CVE-2026-69519 | 8.6 | — | — | — | microsoft / azure stack hci | Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a | 64d ago |
| CVE-2026-66800 | 8.6 | — | — | — | microsoft / azure data factory | Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information o | 64d ago |
| CVE-2026-26139 | 8.6 | — | — | — | microsoft / purview | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over | 218d ago |
| CVE-2026-26138 | 8.6 | — | — | — | microsoft / purview | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over | 218d ago |
| CVE-2026-23659 | 8.6 | — | — | — | microsoft / azure data factory | Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker t | 218d ago |
