CVE Vulnerability Database

Search and browse 375,898 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE ID	Severity	CVSS	EPSS	Published	Description
CVE-2026-63530	MEDIUM	5.5	—	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63529	MEDIUM	5.5	—	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63528	MEDIUM	5.5	—	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63527	HIGH	7.8	—	Aug 11, 2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63526	HIGH	7.8	—	Aug 11, 2026	Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63525	HIGH	7.8	—	Aug 11, 2026	Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63524	MEDIUM	5.5	—	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63522	HIGH	7.8	—	Aug 11, 2026	Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate pri...
CVE-2026-63521	MEDIUM	5.5	0.4%	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63520	HIGH	8.1	—	Aug 11, 2026	Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
CVE-2026-63519	HIGH	7.8	—	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63518	HIGH	7.8	—	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63517	MEDIUM	5.5	—	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63516	MEDIUM	6.5	1.2%	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over ...
CVE-2026-63515	HIGH	7.8	—	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63514	HIGH	8.8	—	Aug 11, 2026	Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne...
CVE-2026-63513	HIGH	7.8	—	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63512	MEDIUM	6.5	0.5%	Aug 11, 2026	Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network...
CVE-2026-62917	MEDIUM	4.6	—	Aug 11, 2026	Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networ...
CVE-2026-62915	MEDIUM	6.5	—	Aug 11, 2026	Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a net...
CVE-2026-62914	HIGH	7.3	—	Aug 11, 2026	Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows...
CVE-2026-62913	HIGH	8.8	—	Aug 11, 2026	Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
CVE-2026-62912	MEDIUM	6.5	—	Aug 11, 2026	Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a netw...
CVE-2026-62911	HIGH	8	—	Aug 11, 2026	Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges...
CVE-2026-62910	HIGH	7.2	—	Aug 11, 2026	Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attack...