Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High7.6phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by the mutable prefer…Vuln · CVE-2026-111895 · CVE.org · NIST NVDOct 17, 2026
High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityVuln · CVE-2026-96199 · Microsoft · CSAF Advisories · CVE.org · Chrome, EdgeOct 16, 2026
High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityVuln · CVE-2026-96198 · Microsoft · CSAF Advisories · CVE.org · Chrome, EdgeOct 16, 2026
UnknownMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityVuln · CVE-2026-85898 · Microsoft · CSAF Advisories · CVE.org · Chrome, EdgeOct 16, 2026
High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityVuln · CVE-2026-85897 · Microsoft · CSAF Advisories · CVE.org · Chrome, EdgeOct 16, 2026
High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityVuln · CVE-2026-85890 · Microsoft · CSAF Advisories · CVE.org · Chrome, EdgeOct 16, 2026
UnknownMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityVuln · CVE-2026-83831 · Microsoft · CSAF Advisories · CVE.org · Chrome, EdgeOct 16, 2026
High7.5Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.Vuln · CVE-2026-109468 · Microsoft · Microsoft Visual Studio 2022 version 17.14 · CSAF Advisories · CVE.org · FIRST EPSS · MicrosoftEPSS 0.6%Oct 15, 2026
High8.8Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Vuln · CVE-2026-108452 · Microsoft · SharePoint · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.6%Oct 15, 2026
High8.8Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108451 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108450 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108449 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High7.5Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108448 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.3%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108447 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108446 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108445 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Microsoft Office Remote Code Execution VulnerabilityVuln · CVE-2026-108444 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108443 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108442 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108441 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108440 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108439 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
Medium6.5Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.Vuln · CVE-2026-108438 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108437 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
Medium6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.Vuln · CVE-2026-108436 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026