CVE-2026-58639

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-56776

Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-56774

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network...

EUVD-2026-56773

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...

EUVD-2026-56769

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...

EUVD-2026-56768

Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...

CVE-2026-70337

Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...

EUVD-2026-56767

Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-56766

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-68805

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-56760

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-56755

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-68799

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

EUVD-2026-56752

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

EUVD-2026-56753

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

EUVD-2026-56751

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

EUVD-2026-56748

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

EUVD-2026-56745

Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally...

EUVD-2026-56746

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...

CVE-2026-66802

CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...