CVE Vulnerability Database

Search and browse 424,261 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-105718HIGH8.8Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-105717HIGH8.8Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105716HIGH8.8Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105715HIGH7.5Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-105714HIGH7.5Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105713MEDIUM5.7Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over...
CVE-2026-105599HIGH7.5Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
CVE-2026-105598HIGH8.8Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105597HIGH8.8Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105596HIGH8.8Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105595HIGH8.8Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105593HIGH8.8Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105592HIGH7.5Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105591HIGH8.8Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105016CRITICAL9.8Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2026-105013HIGH7.4Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne...
CVE-2026-105010CRITICAL9.8Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a networ...
CVE-2026-105009HIGH7.5Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges local...
CVE-2026-105008CRITICAL9No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-105007HIGH8.8An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails ...
CVE-2026-105006MEDIUM6.4Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-105005HIGH8.1Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.
CVE-2026-105004HIGH7.8Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-105003HIGH7.8Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2026-104937HIGH8.1Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective ...