Lucene search
+L
Microsoft CVERecent

32226 matches found

Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•33 views

.NET and Visual Studio Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

8.8CVSS6AI score0.00837EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•17 views

Dynamics Business Central Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.9AI score0.01039EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•20 views

Microsoft Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

7.8CVSS7.9AI score0.00549EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•14 views

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00289EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•16 views

Microsoft Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00278EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•19 views

RPC Runtime Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in RPC Runtime allows an unauthorized attacker to execute code over a network...

8.8CVSS6.4AI score0.0085EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•27 views

Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

6.5CVSS5.7AI score0.00972EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•17 views

Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00289EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•14 views

Windows Storage Port Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

4.6CVSS5.8AI score0.0051EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•30 views

Windows Graphics Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00353EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•15 views

Windows Security Center Elevation of Privilege Vulnerability

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally...

7CVSS6AI score0.00268EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•14 views

Windows Key Storage Provider Information Disclosure Vulnerability

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

4.7CVSS5.8AI score0.00353EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•28 views

Microsoft Office Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

8.8CVSS6.6AI score0.00841EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•19 views

Remote Desktop Gateway Service Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

8.1CVSS6.8AI score0.00818EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•19 views

Windows Group Policy Elevation of Privilege Vulnerability

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00326EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•17 views

Windows Workstation Service Elevation of Privilege Vulnerability

Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00279EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•17 views

Windows OLE Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network...

9.8CVSS6.2AI score0.0101EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•16 views

Windows Storage Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00289EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•25 views

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network...

8.8CVSS6.2AI score0.02072EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•29 views

Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

8.8CVSS6.6AI score0.00841EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•15 views

SysInternals Elevation of Privilege Vulnerability

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

7.1CVSS5.7AI score0.00362EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•29 views

Microsoft Office Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

8.8CVSS6.6AI score0.00859EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•146 views

Visual Studio Code Security Feature Bypass Vulnerability

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...

6.1CVSS5.8AI score0.00265EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•30 views

Microsoft Office Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

8.8CVSS6.7AI score0.00912EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•14 views

Windows Modern Device Management (MDM) Information Disclosure Vulnerability

Use of uninitialized resource in Windows Modern Device Management MDM allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.0044EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•30 views

Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

8.8CVSS6.6AI score0.0091EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•29 views

Microsoft Office Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

8.8CVSS8.5AI score0.0093EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•18 views

Azure CycleCloud Remote Code Execution Vulnerability

Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...

7.3CVSS6.4AI score0.00442EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•15 views

Windows Update Elevation of Privilege Vulnerability

Use after free in Windows Update allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00279EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•24 views

Windows DHCP Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

9.8CVSS6.7AI score0.0105EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•16 views

SysInternals Elevation of Privilege Vulnerability

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

7.1CVSS5.7AI score0.00406EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•26 views

RPC Endpoint Mapper Service Denial of Service Vulnerability

Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network...

5.9CVSS5.9AI score0.00927EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•17 views

Windows Update Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.0031EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•15 views

Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability

Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00269EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•22 views

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00214EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•15 views

Active Directory Federation Services (AD FS) Information Disclosure Vulnerability

Observable discrepancy in Active Directory Federation Services AD FS allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.00876EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•18 views

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

7.8CVSS6.4AI score0.00353EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•17 views

Windows Storage Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00521EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•14 views

Windows Media Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network...

7.5CVSS6.7AI score0.00631EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•14 views

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00193EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•13 views

WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00353EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•17 views

Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

4.7CVSS5.7AI score0.00234EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•11 views

Windows Device Association Service Information Disclosure Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00377EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•13 views

Remote Desktop Display Driver Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.0044EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•14 views

.NET Denial of Service Vulnerability

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS6AI score0.01203EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•14 views

.NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS6AI score0.01203EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•14 views

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

7.8CVSS6.4AI score0.00353EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•19 views

Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...

7.8CVSS6.2AI score0.00303EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•17 views

Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00521EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•17 views

ASP.NET Core Denial of Service Vulnerability

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS6AI score0.00991EPSS
SaveExploits0
Total number of security vulnerabilities32226