Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.8Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-88166 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
High8.8Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-88164 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
High8.8Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-88163 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
High8.8Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-88155 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
High7.5Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscr…CVE-2026-87696 · Microsoft · Exchange · CVE.org · Microsoft Security Update Guide · Exchange, MicrosoftOct 13, 2026
High7.8Affected Microsoft products: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cu…CVE-2026-87695 · Microsoft · Exchange · CVE.org · Microsoft Security Update Guide · Exchange, MicrosoftOct 13, 2026
High7.8Affected Microsoft products: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cu…CVE-2026-87692 · Microsoft · Exchange · CVE.org · Microsoft Security Update Guide · Exchange, MicrosoftOct 13, 2026
Medium6.5Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-85932 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 1.0%Oct 13, 2026
High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-85900 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 1.5%Oct 13, 2026
Medium6.8Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-83573 · Microsoft · Windows · CVE.org · Microsoft Security Update Guide · NIST NVD · Microsoft, WindowsOct 13, 2026
High8.8Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 C…CVE-2026-77910 · Microsoft · Exchange · CVE.org · Microsoft Security Update Guide · Exchange, MicrosoftOct 13, 2026
Medium6.4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.CVE-2026-71347 · Microsoft · Windows · CVE.org · Microsoft Security Update Guide · NIST NVD · Microsoft, WindowsOct 13, 2026
High8.1Affected Microsoft products: Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2019 Cu…CVE-2026-70571 · Microsoft · Exchange · CVE.org · Microsoft Security Update Guide · Exchange, MicrosoftOct 13, 2026
Medium6.5Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-70298 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 1.1%Oct 13, 2026
Critical9.3Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscr…CVE-2026-70279 · Microsoft · Exchange · CVE.org · Microsoft Security Update Guide · Exchange, MicrosoftOct 13, 2026
High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-70246 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.7%Oct 13, 2026
Medium4.9Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-70217 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.9%Oct 13, 2026
High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-70202 · Microsoft · SharePoint · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 13, 2026
High7.5Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.CVE-2026-70095 · Microsoft · Windows · CVE.org · Microsoft Security Update Guide · NIST NVD · Microsoft, WindowsOct 13, 2026
High7.5Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.CVE-2026-70031 · Microsoft · Windows · CVE.org · Microsoft Security Update Guide · NIST NVD · Microsoft, WindowsOct 13, 2026
High8.1Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.CVE-2026-70013 · Microsoft · Windows · CVE.org · Microsoft Security Update Guide · NIST NVD · Microsoft, WindowsOct 13, 2026
Medium6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.CVE-2026-69922 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.8%Oct 13, 2026
Critical9.8Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.CVE-2026-69883 · Microsoft · Windows · CVE.org · Microsoft Security Update Guide · NCSC Netherlands · Microsoft, WindowsOct 13, 2026
Critical9.8Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.CVE-2026-69705 · Microsoft · Windows · CVE.org · Microsoft Security Update Guide · NCSC Netherlands · Microsoft, WindowsOct 13, 2026
High8.8Affected Microsoft products: Windows Server 2019, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 (Server Core installation), Windows 10 Version 1809 for 32-bitCVE-2026-108471 · Microsoft · Windows · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, WindowsEPSS 0.3%Oct 13, 2026