Export limit exceeded: 30275 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (30275 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-55012 | 1 Microsoft | 1 Malware Protection Engine | 2026-07-15 | 7.8 High |
| Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-50438 | 1 Microsoft | 1 Pc Manager | 2026-07-15 | 8.8 High |
| Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-56169 | 1 Microsoft | 1 Windows Admin Center | 2026-07-15 | 8.1 High |
| Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-57107 | 1 Microsoft | 1 Windows Admin Center | 2026-07-15 | 7.8 High |
| Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-55041 | 1 Microsoft | 11 365 Apps, Excel, Excel 2016 and 8 more | 2026-07-15 | 7.8 High |
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-55048 | 1 Microsoft | 11 365 Apps, Excel, Excel 2016 and 8 more | 2026-07-15 | 7.8 High |
| Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-55054 | 2 Apple, Microsoft | 12 Macos, 365 Apps, Excel and 9 more | 2026-07-15 | 6.5 Medium |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-50658 | 1 Microsoft | 1 Defender For Endpoint | 2026-07-15 | 7 High |
| Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-50677 | 1 Microsoft | 6 Windows 11 24h2, Windows 11 24h2, Windows 11 25h2 and 3 more | 2026-07-15 | 7.8 High |
| Use after free in Windows Media allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-55021 | 1 Microsoft | 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 | 2026-07-15 | 7.3 High |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | ||||
| CVE-2026-55033 | 1 Microsoft | 13 365 Apps, Microsoft 365, Office 2019 and 10 more | 2026-07-15 | 7.8 High |
| Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-50678 | 1 Microsoft | 11 365 Apps, Excel, Excel 2016 and 8 more | 2026-07-15 | 6.6 Medium |
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2016-20091 | 2 Malwarebytes, Microsoft | 2 Binisoft Windows Firewall Control, Windows Firewall | 2026-07-15 | 7.8 High |
| Windows Firewall Control 4.8.6.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by inserting malicious executables in the service path. Attackers can place executable files in unquoted path directories that the wfcs.exe service will execute with LocalSystem privileges upon service restart or system reboot. | ||||
| CVE-2026-50506 | 1 Microsoft | 4 .asp.net, .asp.netcore, Asp.net Core Odata and 1 more | 2026-07-14 | 7.5 High |
| Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-34690 | 3 Adobe, Apple, Microsoft | 3 After Effects, Macos, Windows | 2026-07-14 | 7.8 High |
| After Effects is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | ||||
| CVE-2026-56164 | 1 Microsoft | 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 | 2026-07-14 | 5.3 Medium |
| Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-57102 | 1 Microsoft | 1 Visual Studio Code | 2026-07-14 | 8.8 High |
| Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-57101 | 1 Microsoft | 1 Visual Studio Code | 2026-07-14 | 7.1 High |
| Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | ||||
| CVE-2026-55030 | 1 Microsoft | 3 Sharepoint Server, Sharepoint Server 2016, Sharepoint Server 2019 | 2026-07-14 | 4.6 Medium |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | ||||
| CVE-2026-55023 | 1 Microsoft | 12 365 Apps, Microsoft 365, Office 2016 and 9 more | 2026-07-14 | 5.5 Medium |
| Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | ||||