Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
4.6 MEDIUM
CVE-2026-88209 — Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

sharepoint_server | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
4.6 MEDIUM
CVE-2026-88208 — Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

sharepoint_server | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.5 HIGH
CVE-2026-88207 — Microsoft Office PowerPoint Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.5 HIGH
CVE-2026-88206 — Microsoft Office SharePoint Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

sharepoint_server | Remote | Server-Side Request Forgery
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.3 HIGH
CVE-2026-88204 — Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

sharepoint_server | Remote | Cross-Site Scripting
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
6.5 MEDIUM
CVE-2026-88203 — Microsoft Office PowerPoint Information Disclosure Vulnerability

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

365_apps office_2024 office_2021 | Remote | Information Disclosure
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-88202 — Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
6.5 MEDIUM
CVE-2026-88201 — Microsoft Office Excel Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

365_apps office_2024 office_2021 | Remote | Information Disclosure
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-88200 — Microsoft Office SharePoint Elevation of Privilege Vulnerability

Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

sharepoint_server | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-88198 — Microsoft Office SharePoint Elevation of Privilege Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

sharepoint_server | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-88197 — Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-88196 — Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
6.5 MEDIUM
CVE-2026-88195 — Microsoft Office Excel Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

365_apps office_2024 office_2021 | Remote | Information Disclosure
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-88194 — Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-88193 — Microsoft Scripting Engine Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 20, 2026
Oct 13, 2026
Oct 20, 2026
6.5 MEDIUM
CVE-2026-88192 — Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.8 HIGH
CVE-2026-88191 — Microsoft Windows Search Component Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
6.5 MEDIUM
CVE-2026-88190 — Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

365_apps office_2024 office_2021 | Remote | Information Disclosure
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-88189 — Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
7.8 HIGH
CVE-2026-88188 — Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Oct 13, 2026 Oct 16, 2026
Oct 13, 2026
Oct 16, 2026
Showing 20 of 16841 Results