Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.73%Oct 13, 2026
- High7.8Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.Check if you run itEPSS 0.42%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCheck if you run itEPSS 0.36%Oct 13, 2026
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCheck if you run itEPSS 0.27%Oct 13, 2026
- High7.5Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.46%Oct 13, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.51%Oct 13, 2026
- High7.3Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…Check if you run itEPSS 0.63%Oct 13, 2026
- Medium6.5Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.83%Oct 13, 2026
- High8.8Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.70%Oct 13, 2026
- High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.70%Oct 13, 2026
- Medium6.5Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.63%Oct 13, 2026
- Medium6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.83%Oct 13, 2026
- Medium6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.83%Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.72%Oct 13, 2026
- High8.1Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.67%Oct 13, 2026
- Medium6.5Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.83%Oct 13, 2026
- High8.8Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.82%Oct 13, 2026
- High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.74%Oct 13, 2026
- High8.8Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.82%Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.82%Oct 13, 2026
- High7.5Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscr…Check if you run itEPSS 0.38%Oct 13, 2026
- High7.8Affected Microsoft products: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cu…Check if you run itEPSS 0.24%Oct 13, 2026
- High7.8Affected Microsoft products: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cu…Check if you run itEPSS 1.59%Oct 13, 2026
- Medium6.5Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.Check if you run itEPSS 1.04%Oct 13, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.52%Oct 13, 2026