High-severity CVEs (page 7)
Page 7 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-68814 | High | 7.8 | 2026-08-11 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68812 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68811 | High | 7.8 | 2026-08-11 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68810 | High | 7.8 | 2026-08-11 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68807 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68806 | High | 7.8 | 2026-08-11 | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68805 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68804 | High | 7.8 | 2026-08-11 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68803 | High | 7.8 | 2026-08-11 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68801 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68800 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68798 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68796 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68795 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68794 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68793 | High | 7.8 | 2026-08-11 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-68792 | High | 7.8 | 2026-08-11 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges loc… |
CVE-2026-66808 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-66807 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-66805 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-66804 | High | 7.8 | 2026-08-11 | Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-66802 | High | 8.1 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Azure Attestation service and Device Health Attestatio… |
CVE-2026-66799 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally. |
CVE-2026-65815 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. |
CVE-2026-65814 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-65811 | High | 8.8 | 2026-08-11 | Improper input validation in Power BI allows an authorized attacker to execute code over a network. |
CVE-2026-65810 | High | 7.8 | 2026-08-11 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-65807 | High | 8.8 | 2026-08-11 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-65796 | High | 8.1 | 2026-08-11 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-65790 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
CVE-2026-65789 | High | 8.1 | 2026-08-11 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. |
CVE-2026-65788 | High | 7.0 | 2026-08-11 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-65787 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-65786 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-65783 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65782 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65781 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65780 | High | 7.0 | 2026-08-11 | Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65779 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65778 | High | 7.0 | 2026-08-11 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
CVE-2026-65776 | High | 7.0 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-65775 | High | 7.8 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-65774 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-65773 | High | 7.8 | 2026-08-11 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-65768 | High | 8.8 | 2026-08-11 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code o… |
CVE-2026-65767 | High | 8.8 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform sp… |
CVE-2026-65681 | High | 7.5 | 2026-08-11 | Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network. |
CVE-2026-65679 | High | 8.1 | 2026-08-11 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. |
CVE-2026-65678 | High | 7.0 | 2026-08-11 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-65675 | High | 7.1 | 2026-08-11 | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-65673 | High | 7.8 | 2026-08-11 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sync allows an authorized attacker to elevate p… |
CVE-2026-65672 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. |
CVE-2026-65671 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. |
CVE-2026-65665 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-65664 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-65663 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-65661 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-65658 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-65657 | High | 7.8 | 2026-08-11 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-65656 | High | 7.8 | 2026-08-11 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64921 | High | 8.8 | 2026-08-11 | Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-64920 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64919 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64915 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-64914 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64912 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64911 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64910 | High | 7.8 | 2026-08-11 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64909 | High | 7.8 | 2026-08-11 | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64908 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64907 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-64906 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
CVE-2026-64905 | High | 7.8 | 2026-08-11 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-64904 | High | 7.8 | 2026-08-11 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64903 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-64901 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-64900 | High | 7.3 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform sp… |
CVE-2026-64898 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63533 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63532 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63527 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-63526 | High | 7.8 | 2026-08-11 | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63525 | High | 7.8 | 2026-08-11 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-63522 | High | 7.8 | 2026-08-11 | Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally. |
CVE-2026-63520 | High | 8.1 | 2026-08-11 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. |
CVE-2026-63519 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63518 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-63515 | High | 7.8 | 2026-08-11 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-63514 | High | 8.8 | 2026-08-11 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-63513 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-62914 | High | 7.3 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoo… |
CVE-2026-62913 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network. |
CVE-2026-62911 | High | 8.0 | 2026-08-11 | Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-62910 | High | 7.2 | 2026-08-11 | Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-62909 | High | 7.8 | 2026-08-11 | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. |
CVE-2026-62908 | High | 7.0 | 2026-08-11 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate p… |
CVE-2026-62901 | High | 7.5 | 2026-08-11 | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. |
CVE-2026-62898 | High | 7.5 | 2026-08-11 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. |
CVE-2026-62897 | High | 7.0 | 2026-08-11 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally. |
CVE-2026-62894 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |