Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
6.5 MEDIUM
CVE-2026-70263 — Microsoft Office Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-70262 — WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
5.5 MEDIUM
CVE-2026-70261 — Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
5.5 MEDIUM
CVE-2026-70260 — Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
6.5 MEDIUM
CVE-2026-70259 — Microsoft Office SharePoint Information Disclosure Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-70258 — Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-70257 — Microsoft Office Outlook Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-70256 — Microsoft Office Outlook Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.8 HIGH
CVE-2026-70255 — Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-70254 — Microsoft Office Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.0 HIGH
CVE-2026-70253 — Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.0 HIGH
CVE-2026-70252 — Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.5 HIGH
CVE-2026-70251 — Microsoft Office SharePoint Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-70250 — Windows DHCP Client Remote Code Execution Vulnerability

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.0 HIGH
CVE-2026-70249 — Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
6.5 MEDIUM
CVE-2026-70248 — Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-70247 — HTTP.sys Remote Code Execution Vulnerability

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-70246 — Microsoft Office SharePoint Elevation of Privilege Vulnerability

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-70245 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
6.5 MEDIUM
CVE-2026-70244 — Windows DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
Showing 20 of 15155 Results