Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownCVE-2026-108399 is listed by Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities.EPSS 0.3%Oct 13, 2026
- UnknownCVE-2026-105733 is listed by Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities.EPSS 0.3%Oct 13, 2026
- UnknownCVE-2026-102214 is listed by Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities.EPSS 0.3%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.EPSS 0.6%Oct 13, 2026
- High7.8Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High7.8Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High7.8Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High7.8Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High7.0Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High7.8Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- Medium5.5Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform t…Oct 13, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an aut…Oct 13, 2026
- High7.0Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- High8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.6%Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.7%Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- High8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.7%Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.5%Oct 13, 2026
- High8.8Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.7%Oct 13, 2026
- Critical9.8Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.EPSS 1.0%Oct 13, 2026
- High8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.7%Oct 13, 2026
- Medium5.5Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.Oct 13, 2026
- Medium6.5Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.EPSS 0.8%Oct 13, 2026
- High8.8Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026