Filtered by vendor Microsoft
Subscribe
Total
28847 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-58279 | 1 Microsoft | 1 Azure Cyclecloud | 2026-11-03 | N/A | 6.5 MEDIUM |
| Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-56649 | 1 Microsoft | 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more | 2026-11-03 | N/A | 5.9 MEDIUM |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-56178 | 1 Microsoft | 1 Defender For Endpoint | 2026-11-03 | N/A | 5.5 MEDIUM |
| Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-55126 | 1 Microsoft | 1 Sharepoint Server | 2026-11-03 | N/A | 7.3 HIGH |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | |||||
| CVE-2026-54130 | 1 Microsoft | 1 365 Copilot | 2026-11-03 | N/A | 9.8 CRITICAL |
| Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-50447 | 1 Microsoft | 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more | 2026-11-03 | N/A | 9.8 CRITICAL |
| Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-50377 | 1 Microsoft | 11 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 8 more | 2026-11-03 | N/A | 5.5 MEDIUM |
| Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-50354 | 1 Microsoft | 11 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 8 more | 2026-11-03 | N/A | 7.1 HIGH |
| Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-42895 | 1 Microsoft | 1 365 Copilot | 2026-11-03 | N/A | 6.5 MEDIUM |
| Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network. | |||||
| CVE-2026-100219 | 1 Microsoft | 7 Windows 11 23h2, Windows 11 24h2, Windows 11 25h2 and 4 more | 2026-11-03 | N/A | 9.8 CRITICAL |
| Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-118330 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-11-03 | N/A | 8.8 HIGH |
| Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-118310 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-11-03 | N/A | 9.6 CRITICAL |
| Use after free in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-113340 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-11-03 | N/A | 6.5 MEDIUM |
| Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-113334 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-11-03 | N/A | 8.8 HIGH |
| Buffer overflow in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-113326 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-11-03 | N/A | 6.5 MEDIUM |
| Improper input validation in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | |||||
| CVE-2026-113295 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-11-03 | N/A | 6.5 MEDIUM |
| Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-113293 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-11-03 | N/A | 8.8 HIGH |
| Out of bounds write in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-113285 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-11-03 | N/A | 8.8 HIGH |
| Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||
| CVE-2026-113283 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-11-03 | N/A | 9.6 CRITICAL |
| Improper privilege management in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a local attacker to execute arbitrary code outside the sandbox via physical access. (Chromium security severity: Medium) | |||||
| CVE-2026-113252 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-11-03 | N/A | 9.6 CRITICAL |
| Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) | |||||