VulnSea

Tagged “nvd”

CVEs tagged nvd, newest first.

51022 CVEsRSS

CVE-2026-88202High· 8.8
3w ago

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

▾ Twilightmicrosoft · 365_appsEPSS 0.76%via NVD
CVE-2026-88201Medium· 6.5
3w ago

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · 365_appsEPSS 0.63%via NVD
CVE-2026-88200High· 8.8
3w ago

Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

▾ Twilightmicrosoft · sharepoint_serverEPSS 0.81%via NVD
CVE-2026-88198High· 8.8
3w ago

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

▾ Twilightmicrosoft · sharepoint_serverEPSS 0.71%via NVD
CVE-2026-88197High· 8.8
3w ago

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

▾ Twilightmicrosoft · 365_appsEPSS 0.52%via NVD
CVE-2026-88196High· 8.8
3w ago

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

▾ Twilightmicrosoft · 365_appsEPSS 0.74%via NVD
CVE-2026-88195Medium· 6.5
3w ago

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · 365_appsEPSS 0.81%via NVD
CVE-2026-88194High· 7.8
3w ago

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.31%via NVD
CVE-2026-88193High· 7.8
3w ago

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.30%via NVD
CVE-2026-88192Medium· 6.5
3w ago

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · 365_appsEPSS 0.95%via NVD
CVE-2026-88191High· 7.8
3w ago

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.38%via NVD
CVE-2026-88190Medium· 6.5
3w ago

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · 365_appsEPSS 0.95%via NVD
CVE-2026-88189High· 7.8
3w ago

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1809EPSS 0.24%via NVD
CVE-2026-88188High· 7.8
3w ago

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.31%via NVD
CVE-2026-88186High· 8.8
3w ago

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

▾ Twilightmicrosoft · 365_appsEPSS 0.86%via NVD
CVE-2026-88185High· 8.1
3w ago

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

▾ Twilightmicrosoft · 365_appsEPSS 0.78%via NVD
CVE-2026-88184Medium· 6.5
3w ago

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · 365_appsEPSS 0.81%via NVD
CVE-2026-88183Medium· 6.5
3w ago

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · 365_appsEPSS 0.95%via NVD
CVE-2026-88182High· 7.8
3w ago

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.31%via NVD
CVE-2026-88181High· 7.8
3w ago

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1809EPSS 0.31%via NVD
CVE-2026-88180High· 7.8
3w ago

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1809EPSS 0.24%via NVD
CVE-2026-88179High· 7.8
3w ago

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.31%via NVD
CVE-2026-88178Critical· 9.8
3w ago

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

▾ Midnightmicrosoft · 365_appsEPSS 0.97%via NVD
CVE-2026-88177High· 7.8
3w ago

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.24%via NVD
CVE-2026-88175Medium· 6.5
3w ago

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · 365_appsEPSS 0.84%via NVD
CVE-2026-88174High· 8.1
3w ago

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.42%via NVD
CVE-2026-88173High· 8.1
3w ago

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.51%via NVD
CVE-2026-88172Medium· 6.5
3w ago

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · 365_appsEPSS 0.95%via NVD
CVE-2026-88171High· 8.1
3w ago

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

▾ TwilightMicrosoft · Windows 10 Version 1607EPSS 0.69%via NVD
CVE-2026-88169Medium· 6.5
3w ago

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · 365_appsEPSS 0.84%via NVD
CVEs tagged “nvd” — page 73 · VulnSea