CVE-2026-83681

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...

CVE-2026-83574

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-83575

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-83570

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-83564

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-83517

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-77910

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-77902

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-70300

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-70301

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-70302

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-70571

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

CVE-2026-70298

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-70287

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-70291

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-70279

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70278

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...

CVE-2026-70281

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...

CVE-2026-70282

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-70276

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...