Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Total 28847 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-118302 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-11-13 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118301 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-11-13 N/A 7.5 HIGH
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118300 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-11-13 N/A 6.5 MEDIUM
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-118299 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-11-13 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118298 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-11-13 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118297 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-11-13 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118296 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-11-13 N/A 8.8 HIGH
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118295 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-11-13 N/A 8.8 HIGH
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118294 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-11-13 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118293 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-11-13 N/A 8.8 HIGH
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-118292 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-11-13 N/A 8.8 HIGH
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-116927 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-11-13 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-111292 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-11-13 N/A 6.5 MEDIUM
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-126858 2 Google, Microsoft 2 Chrome, Windows 2026-11-13 N/A 4.7 MEDIUM
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113560 3 Adobe, Apple, Microsoft 3 Audition, Macos, Windows 2026-11-13 N/A 7.7 HIGH
Audition is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CVE-2026-113562 3 Adobe, Apple, Microsoft 3 Audition, Macos, Windows 2026-11-13 N/A 7.7 HIGH
Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CVE-2026-113563 3 Adobe, Apple, Microsoft 3 Audition, Macos, Windows 2026-11-13 N/A 8.6 HIGH
Audition is affected by a Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CVE-2026-113565 3 Adobe, Apple, Microsoft 3 Audition, Macos, Windows 2026-11-13 N/A 7.8 HIGH
Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-113567 3 Adobe, Apple, Microsoft 3 Audition, Macos, Windows 2026-11-13 N/A 7.8 HIGH
Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-126867 2 Google, Microsoft 2 Chrome, Windows 2026-11-13 N/A 8.8 HIGH
Use after free in Browser in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)