CVE Program partner

microsoft

Microsoft Corporation

API
CVEs, 365 days4,55216,865 all time, 936 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationMicrosoft Corporation
RoleCNA
TypeVendor
Reports tomitre
ScopeMicrosoft issues only, excluding end-of-life (EOL) as listed in the <a href='https://learn.microsoft.com/en-US/lifecycle/' target='_blank'>Microsoft Lifecycle Policy</a>.
Advisorieshttps://www.microsoft.com/en-us/msrc/technical-security-notifications

Latest CVEs · RSS

  • CVE-2026-80092 2026-10-16 · CVSS 5.3
    Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-109461 2026-10-16 · CVSS 5.9
    Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.
  • CVE-2026-109468 2026-10-15 · CVSS 7.5
    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
  • CVE-2026-108455 2026-10-15 · CVSS 6.5
    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
  • CVE-2026-108454 2026-10-15 · CVSS 6.5
    Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
  • CVE-2026-108453 2026-10-15 · CVSS 6.5
    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
  • CVE-2026-108452 2026-10-15 · CVSS 8.8
    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over
  • CVE-2026-108451 2026-10-15 · CVSS 8.8
    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108450 2026-10-15 · CVSS 8.8
    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108449 2026-10-15 · CVSS 8.8
    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108448 2026-10-15 · CVSS 7.5
    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108447 2026-10-15 · CVSS 8.8
    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108446 2026-10-15 · CVSS 8.8
    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108445 2026-10-15 · CVSS 8.8
    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108444 2026-10-15 · CVSS 8.8
    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108443 2026-10-15 · CVSS 8.8
    Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108442 2026-10-15 · CVSS 8.8
    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108441 2026-10-15 · CVSS 8.8
    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108440 2026-10-15 · CVSS 8.8
    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108439 2026-10-15 · CVSS 8.8
    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108438 2026-10-15 · CVSS 6.5
    Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
  • CVE-2026-108437 2026-10-15 · CVSS 8.8
    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
  • CVE-2026-108436 2026-10-15 · CVSS 6.5
    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
  • CVE-2026-108435 2026-10-15 · CVSS 6.5
    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
  • CVE-2026-108434 2026-10-15 · CVSS 6.5
    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

All CVE Program partners