CVE Vulnerability Database
Search and browse 423,865 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108444 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108443 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108442 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108441 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108440 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108439 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108438 | MEDIUM | 6.5 | 0.5% | Oct 15, 2026 | Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-108437 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108436 | MEDIUM | 6.5 | 0.5% | Oct 15, 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-108435 | MEDIUM | 6.5 | 0.5% | Oct 15, 2026 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a ne... |
| CVE-2026-108434 | MEDIUM | 6.5 | 0.5% | Oct 15, 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-108433 | HIGH | 7.8 | 0.3% | Oct 15, 2026 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a... |
| CVE-2026-108432 | HIGH | 8.8 | 0.5% | Oct 15, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108431 | HIGH | 8.8 | 0.5% | Oct 15, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108430 | HIGH | 8.8 | 0.5% | Oct 15, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108429 | HIGH | 8.8 | 0.5% | Oct 15, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108428 | HIGH | 8.8 | 0.5% | Oct 15, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108427 | HIGH | 8.8 | 0.5% | Oct 15, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108426 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105040 | HIGH | 8.8 | 0.3% | Oct 15, 2026 | The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment)... |
| CVE-2026-105039 | CRITICAL | 9.6 | 0.3% | Oct 15, 2026 | EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs... |
| CVE-2026-105038 | CRITICAL | 9.8 | 0.6% | Oct 15, 2026 | The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions wi... |
| CVE-2026-105037 | CRITICAL | 9.9 | 0.4% | Oct 15, 2026 | EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to... |
| CVE-2026-105036 | HIGH | 7.5 | 0.2% | Oct 15, 2026 | EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows de... |
| CVE-2026-105035 | HIGH | 7.8 | 0.2% | Oct 15, 2026 | The EnergizeLab FirmwareUpdater (AArch64 ELF, distributed in the CDN bin.zip) uses a single hard-coded AES key shared by... |