Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.5 HIGH
CVE-2026-105599 — Microsoft Office PowerPoint Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-105598 — Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-105597 — Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-105596 — Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-105595 — Microsoft Office Access Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-105593 — Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.5 HIGH
CVE-2026-105592 — Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-105591 — Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
9.8 CRITICAL
CVE-2026-105016 — Microsoft QUIC Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.4 HIGH
CVE-2026-105013 — Microsoft Office SharePoint Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-105010 — Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.5 HIGH
CVE-2026-105009 — Windows Server Update Service Elevation of Privilege Vulnerability

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 17, 2026
Oct 13, 2026
Oct 17, 2026
9.0 CRITICAL
CVE-2026-105008 — Windows Schannel Spoofing Vulnerability

No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-105007 — Windows NDIS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the v…

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
6.4 MEDIUM
CVE-2026-105006 — HID Class Driver Elevation of Privilege Vulnerability

Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
8.1 HIGH
CVE-2026-105005 — Windows Schannel Remote Code Execution Vulnerability

Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-105004 — Windows Overlay Filter Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-105003 — HID Class Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
0.0 NA
CVE-2026-104937 — CVE-2026-104937

Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enabling stored cross-site scripting (XSS). When a malicious …

shopware | Cross-Site Scripting
Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.1 HIGH
CVE-2026-104875 — Ente: Accepted emergency contact can bypass the recovery notice period

Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approval using a client-suppl…

Remote | Authorization
Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
Showing 20 of 15163 Results