Total CVEs

138,466

Critical Severity

3,569

High Severity

12,817

Last 7 Days

1,986
Quick preset (or use dates below)
Clear Filters
๐Ÿ“… Showing Year: 2026 (January 1 - December 31, 2026) View All Years โ†’
Showing 3,081 - 3,100 of 34,871 CVEs
CVE-2026-45479 MEDIUM - 4.6

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Vendor: microsoft
Product: sharepoint_server
Published: Jun 09, 2026
Source: NVD
CVE-2026-45476 HIGH - 8.2

Use after free in Linux MANA Driver allows an authorized attacker to elevate privileges locally.

Published: Jun 09, 2026
Source: NVD
CVE-2026-45475 HIGH - 7.8

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Published: Jun 09, 2026
Source: NVD
CVE-2026-45474 HIGH - 8.4

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Published: Jun 09, 2026
Source: NVD
CVE-2026-45472 HIGH - 8.4

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Published: Jun 09, 2026
Source: NVD
CVE-2026-45471 HIGH - 7.8

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Published: Jun 09, 2026
Source: NVD
CVE-2026-45469 HIGH - 7.8

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Vendor: microsoft
Product: 365_apps
Published: Jun 09, 2026
Source: NVD
CVE-2026-45468 MEDIUM - 4.6

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Vendor: microsoft
Product: sharepoint_server
Published: Jun 09, 2026
Source: NVD
CVE-2026-45467 MEDIUM - 4.6

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Vendor: microsoft
Product: sharepoint_server
Published: Jun 09, 2026
Source: NVD

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Published: Jun 09, 2026
Source: NVD
CVE-2026-45465 MEDIUM - 5.4

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Vendor: microsoft
Product: sharepoint_server
Published: Jun 09, 2026
Source: NVD
CVE-2026-45464 MEDIUM - 5.4

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Vendor: microsoft
Product: sharepoint_server
Published: Jun 09, 2026
Source: NVD
CVE-2026-45463 HIGH - 8.4

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Published: Jun 09, 2026
Source: NVD
CVE-2026-45462 MEDIUM - 4.6

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Vendor: microsoft
Product: sharepoint_server
Published: Jun 09, 2026
Source: NVD
CVE-2026-45461 HIGH - 8.4

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Published: Jun 09, 2026
Source: NVD
CVE-2026-45460 MEDIUM - 4.7

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Published: Jun 09, 2026
Source: NVD

Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

Vendor: microsoft
Product: 365_apps
Published: Jun 09, 2026
Source: NVD
CVE-2026-45458 HIGH - 8.4

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

Vendor: microsoft
Product: 365_apps
Published: Jun 09, 2026
Source: NVD
CVE-2026-45457 HIGH - 7.8

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Vendor: microsoft
Product: 365_apps
Published: Jun 09, 2026
Source: NVD
CVE-2026-45456 HIGH - 8.4

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

Vendor: microsoft
Product: 365_apps
Published: Jun 09, 2026
Source: NVD