Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
38,402 matching · page 210/769Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-64897(opens NVD record) | Medium | 4.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Aug 11, 2026 |
| CVE-2026-63533(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-63532(opens NVD record) | High | 7.8 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-63531(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-63530(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-63529(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-63528(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-63527(opens NVD record) | High | 7.8 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-63526(opens NVD record) | High | 7.8 | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-63525(opens NVD record) | High | 7.8 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-63524(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-63522(opens NVD record) | High | 7.8 | Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-63521(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-63520(opens NVD record) | High | 8.1 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-63519(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-63518(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-63517(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-63516(opens NVD record) | Medium | 6.5 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Aug 11, 2026 |
| CVE-2026-63515(opens NVD record) | High | 7.8 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-63514(opens NVD record) | High | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-63513(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-63512(opens NVD record) | Medium | 6.5 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. | Aug 11, 2026 |
| CVE-2026-62917(opens NVD record) | Medium | 4.6 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | Aug 11, 2026 |
| CVE-2026-62915(opens NVD record) | Medium | 6.5 | Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network. | Aug 11, 2026 |
| CVE-2026-62914(opens NVD record) | High | 7.3 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. | Aug 11, 2026 |
| CVE-2026-62913(opens NVD record) | High | 8.8 | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-62912(opens NVD record) | Medium | 6.5 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network. | Aug 11, 2026 |
| CVE-2026-62911(opens NVD record) | High | 8.0 | Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | Aug 11, 2026 |
| CVE-2026-62910(opens NVD record) | High | 7.2 | Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | Aug 11, 2026 |
| CVE-2026-62909(opens NVD record) | High | 7.8 | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-62908(opens NVD record) | High | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-62902(opens NVD record) | Medium | 6.5 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. | Aug 11, 2026 |
| CVE-2026-62901(opens NVD record) | High | 7.5 | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. | Aug 11, 2026 |
| CVE-2026-62900(opens NVD record) | Medium | 5.9 | Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network. | Aug 11, 2026 |
| CVE-2026-62899(opens NVD record) | Medium | 5.9 | Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network. | Aug 11, 2026 |
| CVE-2026-62898(opens NVD record) | High | 7.5 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | Aug 11, 2026 |
| CVE-2026-62897(opens NVD record) | High | 7.0 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-62894(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-62893(opens NVD record) | Critical | 9.8 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-62892(opens NVD record) | High | 7.0 | Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-62890(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. | Aug 11, 2026 |
| CVE-2026-62889(opens NVD record) | High | 8.1 | Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. | Aug 11, 2026 |
| CVE-2026-62888(opens NVD record) | High | 7.8 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-62887(opens NVD record) | Medium | 5.5 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | Aug 11, 2026 |
| CVE-2026-62886(opens NVD record) | High | 7.8 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-62885(opens NVD record) | High | 7.8 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-62883(opens NVD record) | Medium | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-62882(opens NVD record) | Medium | 4.3 | Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. | Aug 11, 2026 |
| CVE-2026-62881(opens NVD record) | Medium | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |
| CVE-2026-62880(opens NVD record) | High | 7.8 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 |