Microsoft vulnerabilities, page 2
17,342 vulnerabilities
Known vulnerabilities in Microsoft products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2,370 products.
CVE-2026-108438microsoft365_apps+7
EPSS score0.51%
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108437microsoft365_apps+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108436microsoft365_apps+9EPSS score0.51%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108435microsoft365_apps+9EPSS score0.51%
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108434microsoft365_apps+9EPSS score0.51%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108433microsoft365_apps+9EPSS score0.32%
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.CVE-2026-108432microsoft365_apps+9EPSS score0.45%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108431microsoft365_apps+9EPSS score0.45%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108430microsoft365_apps+9EPSS score0.45%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108429microsoft365_apps+5EPSS score0.45%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108428microsoft365_apps+5EPSS score0.45%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108427microsoft365_apps+5EPSS score0.46%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108426microsoft365_apps+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-88164microsoftmicrosoft sharepoint server subscription editionEPSS score0.74%
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-103572microsoftmicrosoft visual studio 2022 version 17.14+1EPSS score0.82%
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.CVE-2026-102850microsoft365_apps+5EPSS score0.63%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-102849microsoft365_apps+5EPSS score0.63%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-97844microsoftwindows_10_1607+28EPSS score0.73%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97843microsoftwindows_10_1607+28EPSS score0.73%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97842microsoftwindows_10_1607+28EPSS score0.55%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.