CVE Vulnerability Database
Search and browse 424,124 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97017 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97016 | CRITICAL | 9.8 | 1.0% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97014 | MEDIUM | 5.5 | 0.5% | Oct 13, 2026 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-97012 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97011 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97010 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97009 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-97008 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a ... |
| CVE-2026-97007 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97005 | MEDIUM | 5.5 | 0.4% | Oct 13, 2026 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
| CVE-2026-97004 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97003 | HIGH | 8.8 | 0.7% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97001 | HIGH | 7.8 | 0.4% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-96997 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96996 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-96995 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96960 | HIGH | 7.5 | 1.0% | Oct 13, 2026 | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96959 | HIGH | 7.5 | 0.8% | Oct 13, 2026 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw... |
| CVE-2026-96958 | HIGH | 7.5 | 1.0% | Oct 13, 2026 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96957 | HIGH | 8.8 | 0.4% | Oct 13, 2026 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature ov... |
| CVE-2026-96953 | HIGH | 7.8 | 0.2% | Oct 13, 2026 | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to exe... |
| CVE-2026-96952 | HIGH | 8.8 | 0.8% | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a ... |
| CVE-2026-96951 | HIGH | 8.8 | 9.8% | Oct 13, 2026 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthori... |
| CVE-2026-96950 | HIGH | 7.8 | 0.3% | Oct 13, 2026 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privi... |
| CVE-2026-96949 | HIGH | 7 | 0.2% | Oct 13, 2026 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privi... |