| CVE-2026-70354 | 7.8 | — | — | — | microsoft / visual studio 2022 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-70347 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-70346 | 7.8 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-70345 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-70344 | 7.8 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-70338 | 7.8 | — | — | — | microsoft / powershell | Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker | 73d ago |
| CVE-2026-70335 | 7.8 | — | — | — | microsoft / visual studio code | Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and V | 73d ago |
| CVE-2026-70313 | 7.8 | — | — | — | microsoft / 365 apps | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information l | 73d ago |
| CVE-2026-70311 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-69278 | 7.8 | — | — | — | microsoft / visual studio code | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally | 73d ago |
| CVE-2026-68817 | 7.8 | — | — | — | microsoft / 365 apps | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68816 | 7.8 | — | — | — | microsoft / 365 apps | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68815 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68814 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68812 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68811 | 7.8 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized att | 73d ago |
| CVE-2026-68810 | 7.8 | — | — | — | microsoft / 365 apps | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68807 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68806 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68805 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68804 | 7.8 | — | — | — | microsoft / 365 apps | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68803 | 7.8 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized att | 73d ago |
| CVE-2026-68801 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68800 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68798 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68796 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68795 | 7.8 | — | — | — | microsoft / 365 apps | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68794 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68793 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-68792 | 7.8 | — | — | — | microsoft / 365 apps | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an | 73d ago |
| CVE-2026-66807 | 7.8 | — | — | — | microsoft / 365 apps | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-66804 | 7.8 | — | — | — | microsoft / windows 10 22h2 | Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locall | 73d ago |
| CVE-2026-66799 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65814 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges loca | 73d ago |
| CVE-2026-65810 | 7.8 | — | — | — | microsoft / .net framework | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65790 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65787 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65786 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65775 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65774 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65773 | 7.8 | — | — | — | microsoft / windows 10 1809 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. | 73d ago |
| CVE-2026-65673 | 7.8 | — | — | — | microsoft / entra connect | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sy | 73d ago |
| CVE-2026-65672 | 7.8 | — | — | — | microsoft / windows 11 23h2 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locall | 73d ago |
| CVE-2026-65671 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locall | 73d ago |
| CVE-2026-65664 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-65661 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-65657 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-65656 | 7.8 | — | — | — | microsoft / 365 apps | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an | 73d ago |
| CVE-2026-64920 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-64919 | 7.8 | — | — | — | microsoft / 365 apps | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-64915 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-64914 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-64912 | 7.8 | — | — | — | microsoft / 365 apps | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-64911 | 7.8 | — | — | — | microsoft / 365 apps | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-64910 | 7.8 | — | — | — | microsoft / 365 apps | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-64909 | 7.8 | — | — | — | microsoft / 365 apps | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally | 73d ago |
| CVE-2026-64908 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-64907 | 7.8 | — | — | — | microsoft / 365 apps | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-64906 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 73d ago |
| CVE-2026-64905 | 7.8 | — | — | — | microsoft / 365 apps | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 73d ago |
