Filtered by vendor Microsoft
Subscribe
Total
28847 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-85899 | 1 Microsoft | 1 Edge Chromium | 2026-11-03 | N/A | 8.1 HIGH |
| Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-88077 | 1 Microsoft | 1 Edge Chromium | 2026-11-03 | N/A | 8.8 HIGH |
| Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | |||||
| CVE-2026-88090 | 1 Microsoft | 1 Edge Chromium | 2026-11-03 | N/A | 5.4 MEDIUM |
| Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | |||||
| CVE-2026-96196 | 1 Microsoft | 1 Edge Chromium | 2026-11-03 | N/A | 8.8 HIGH |
| Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. | |||||
| CVE-2026-96198 | 1 Microsoft | 1 Edge Chromium | 2026-11-03 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-96199 | 1 Microsoft | 1 Edge Chromium | 2026-11-03 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-105725 | 1 Microsoft | 1 Windows Security App | 2026-11-03 | N/A | 7.0 HIGH |
| Use after free in Windows Security App allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69446 | 1 Microsoft | 1 Edge Chromium | 2026-11-03 | N/A | 4.4 MEDIUM |
| Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-88094 | 1 Microsoft | 2 Azure-storage-blob-batch, Edge Chromium | 2026-11-03 | N/A | 8.1 HIGH |
| Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2023-36049 | 1 Microsoft | 16 .net, .net Framework, Visual Studio 2022 and 13 more | 2026-11-02 | N/A | 7.6 HIGH |
| .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | |||||
| CVE-2023-36009 | 1 Microsoft | 3 365 Apps, Office, Office Long Term Servicing Channel | 2026-11-02 | N/A | 5.5 MEDIUM |
| Microsoft Word Information Disclosure Vulnerability | |||||
| CVE-2023-23384 | 1 Microsoft | 1 Sql Server | 2026-11-02 | N/A | 7.3 HIGH |
| Microsoft SQL Server Remote Code Execution Vulnerability | |||||
| CVE-2023-21713 | 1 Microsoft | 1 Sql Server | 2026-11-02 | N/A | 8.8 HIGH |
| Microsoft SQL Server Remote Code Execution Vulnerability | |||||
| CVE-2023-21705 | 1 Microsoft | 1 Sql Server | 2026-11-02 | N/A | 8.8 HIGH |
| Microsoft SQL Server Remote Code Execution Vulnerability | |||||
| CVE-2023-21704 | 1 Microsoft | 1 Sql Server | 2026-11-02 | N/A | 7.8 HIGH |
| Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | |||||
| CVE-2023-21568 | 1 Microsoft | 2 Sql Server 2019 Integration Services, Sql Server 2022 Integration Services | 2026-11-02 | N/A | 7.3 HIGH |
| Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability | |||||
| CVE-2023-21528 | 1 Microsoft | 1 Sql Server | 2026-11-02 | N/A | 7.8 HIGH |
| Microsoft SQL Server Remote Code Execution Vulnerability | |||||
| CVE-2022-41083 | 1 Microsoft | 1 Jupyter | 2026-11-02 | N/A | 7.8 HIGH |
| Visual Studio Code Elevation of Privilege Vulnerability | |||||
| CVE-2022-41042 | 1 Microsoft | 1 Visual Studio Code | 2026-11-02 | N/A | 7.4 HIGH |
| Visual Studio Code Information Disclosure Vulnerability | |||||
| CVE-2022-34717 | 1 Microsoft | 3 365 Apps, Office, Office Long Term Servicing Channel | 2026-11-02 | N/A | 8.8 HIGH |
| Microsoft Office Remote Code Execution Vulnerability | |||||