Search Results (83468 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-70337 1 Microsoft 1 Powershell 2026-08-14 8.8 High
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
CVE-2026-70329 1 Microsoft 6 365 Apps, Office 2019, Office 2021 and 3 more 2026-08-14 8.8 High
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-65657 1 Microsoft 8 365 Apps, Microsoft 365, Office 2019 and 5 more 2026-08-14 7.8 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64911 1 Microsoft 15 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 12 more 2026-08-14 7.8 High
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513 1 Microsoft 17 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 14 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-62910 1 Microsoft 9 Exchange Server, Exchange Server 2016, Exchange Server 2019 and 6 more 2026-08-14 7.2 High
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-62823 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-08-14 8.8 High
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-64920 1 Microsoft 7 365 Apps, Access, Access 2016 and 4 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64905 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 7.8 High
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64914 1 Microsoft 7 365 Apps, Access, Access 2016 and 4 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64919 1 Microsoft 7 365 Apps, Access, Access 2016 and 4 more 2026-08-14 7.8 High
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64907 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 7.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64912 1 Microsoft 6 365 Apps, Access, Access 2016 and 3 more 2026-08-14 7.8 High
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64904 1 Microsoft 8 365 Apps, Microsoft 365, Office 2019 and 5 more 2026-08-14 7.8 High
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63533 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63526 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-08-14 7.8 High
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63093 2 Anysphere, Microsoft 2 Cursor, Windows 2026-08-14 8.8 High
Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves and executes the workspace-resident git.exe during IDE startup and on a recurring timed cadence without any user interaction, running the malicious binary under the privileges of the current user.
CVE-2026-19825 1 Sourcecodester 1 Simple Client Management System 2026-08-14 7.3 High
A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=save_service. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-62872 1 Microsoft 15 .net, .net Framework, Windows 10 1607 and 12 more 2026-08-14 8.8 High
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
CVE-2026-62886 1 Microsoft 6 .net, Microsoft Visual Studio 2022, Microsoft Visual Studio 2026 and 3 more 2026-08-14 7.8 High
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.