Lucene search
+L
Microsoft CVERecent

32226 matches found

Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•50 views

Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

8.8CVSS6.5AI score0.00819EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•46 views

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...

9.8CVSS9AI score0.00974EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•38 views

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

8.2CVSS6AI score0.00348EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•24 views

Windows USB Video Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

8.2CVSS7.9AI score0.00348EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•19 views

Windows Win32k Elevation of Privilege Vulnerability

Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally...

7CVSS6AI score0.00236EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•44 views

Microsoft Office Publisher Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...

8.8CVSS6.2AI score0.00819EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•47 views

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

8.8CVSS6.5AI score0.00819EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•20 views

Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an authorized attacker to deny service over a network...

6.5CVSS5.8AI score0.01138EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•17 views

Windows Spaceport.sys Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...

6.8CVSS6.7AI score0.00438EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•19 views

Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00264EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•18 views

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00264EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•24 views

Microsoft Windows Search Component Tampering Vulnerability

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

5.5CVSS6AI score0.00302EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•22 views

Windows Print Spooler Components Elevation of Privilege Vulnerability

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00264EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•15 views

Windows Device Association Broker Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00264EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•19 views

Windows iSCSI Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network...

8.8CVSS6.7AI score0.00913EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•21 views

Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00264EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•79 views

Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

9.8CVSS9.1AI score0.00974EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•16 views

Windows Error Reporting Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00333EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•22 views

Volume Manager Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...

8CVSS6.3AI score0.00768EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•20 views

Windows Overlay Filter Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00333EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•25 views

Windows Spaceport.sys Information Disclosure Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00404EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•17 views

Windows License Manager Elevation of Privilege Vulnerability

Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00264EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•18 views

Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00264EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•18 views

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00995EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•28 views

Windows Management Instrumentation Information Disclosure Vulnerability

Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...

5.7CVSS5.8AI score0.00894EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•27 views

Remote Desktop Gateway Service Elevation of Privilege Vulnerability

Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00264EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•21 views

Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

7.1CVSS6.4AI score0.0057EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•16 views

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

4.9CVSS6.5AI score0.01124EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•14 views

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

7.8CVSS6.5AI score0.00333EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•14 views

Microsoft SQL Server Denial of Service Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network...

6.5CVSS5.9AI score0.01138EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•16 views

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00995EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•17 views

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.9AI score0.01024EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•215 views

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.7AI score0.00874EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•24 views

Windows MIDI Service Module Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00479EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•42 views

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00435EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•33 views

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...

8CVSS6.3AI score0.00768EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•59 views

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

8.8CVSS8.4AI score0.00819EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•217 views

Visual Studio Code Security Feature Bypass Vulnerability

Server-side request forgery ssrf in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.7AI score0.00513EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•20 views

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

7CVSS6AI score0.00264EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•26 views

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

7CVSS7AI score0.00283EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•128 views

Chromium: CVE-2026-84359 Information leak in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

3.1CVSS5.3AI score0.0023EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•23 views

Chromium: CVE-2026-84324 Use after free in Proxy

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

9CVSS8.1AI score0.0047EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•23 views

Windows Enterprise App Management Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network...

8CVSS6.3AI score0.00768EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•18 views

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00333EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•21 views

Windows iSCSI Denial of Service Vulnerability

Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network...

6.5CVSS6AI score0.00885EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•65 views

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

9.6CVSS6AI score0.00863EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•70 views

Microsoft Word Remote Code Execution Vulnerability

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally...

7.8CVSS6.4AI score0.00609EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•51 views

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...

8.1CVSS6.6AI score0.00707EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•213 views

Visual Studio Code Security Feature Bypass Vulnerability

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.2CVSS7.7AI score0.00541EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•219 views

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

5.9CVSS5.9AI score0.00673EPSS
SaveExploits0
Total number of security vulnerabilities32226