Overview 26,247 matches · 1,776 in Waratek scope · 301 protected · 793 exploited · 459 CISA KEV · 2,585 public PoC · 868 EPSS ≥ 0.5
26,247matches
1,776in Waratek scope6.8%
301protected1.1%
793exploited3.0%
459CISA KEV1.7%
2,585public PoC9.8%
868EPSS ≥ 0.53.3%
Protected by Waratek
306
1.2%
Rule in development
3
0.0%
Mitigation candidate
65
0.2%
No exploit published
1,402
5.3%
Outside Waratek scope
1,158
4.4%
Not applicable
23,313
88.8%
Withdrawn CVE
0
0.0%
split by
peak 4,585 / year
19931
Not applicable1
High1
not blocked1
No public exploit1
19944
Not applicable4
High4
not blocked4
No public exploit4
19951
Not applicable1
High1
not blocked1
Working exploit published1
199613
Not applicable13
Critical1
High5
Medium6
Low1
not blocked13
Working exploit published5
Forecast only1
No public exploit7
199719
Not applicable19
High10
Medium9
not blocked19
Working exploit published6
No public exploit13
199830
Not applicable30
High14
Medium15
Low1
not blocked30
Working exploit published11
No public exploit19
1999126
No exploit published1
Outside Waratek scope1
Not applicable124
High51
Medium69
Low6
not blocked126
Working exploit published50
No public exploit76
2000152
Mitigation candidate4
No exploit published5
Outside Waratek scope2
Not applicable141
High60
Medium85
Low7
not blocked152
Exploited2
Working exploit published70
Forecast only1
No public exploit79
2001275
Protected by Waratek1
Mitigation candidate1
No exploit published5
Outside Waratek scope12
Not applicable256
Critical2
High102
Medium149
Low22
blocked by ARMR today1
not blocked274
Exploited4
Working exploit published77
Forecast only2
No public exploit192
2002325
Protected by Waratek1
Mitigation candidate2
No exploit published17
Outside Waratek scope10
Not applicable295
Critical2
High151
Medium164
Low8
blocked by ARMR today1
not blocked324
Exploited4
Working exploit published97
Forecast only7
No public exploit217
2003220
Mitigation candidate1
No exploit published18
Outside Waratek scope6
Not applicable195
Critical2
High78
Medium123
Low17
not blocked220
Exploited5
Working exploit published62
No public exploit153
2004381
Protected by Waratek1
Mitigation candidate1
No exploit published20
Outside Waratek scope6
Not applicable353
Critical2
High141
Medium208
Low30
blocked by ARMR today1
not blocked380
Exploited8
Working exploit published121
No public exploit252
2005487
Mitigation candidate2
No exploit published46
Outside Waratek scope14
Not applicable425
Critical2
High211
Medium227
Low47
not blocked487
Exploited8
Working exploit published115
Forecast only4
No public exploit360
2006521
Protected by Waratek2
Mitigation candidate1
No exploit published75
Outside Waratek scope64
Not applicable379
High250
Medium230
Low41
blocked by ARMR today2
not blocked519
Exploited2
Working exploit published115
Proof of concept only1
Forecast only4
No public exploit399
2007530
Protected by Waratek1
Mitigation candidate1
No exploit published72
Outside Waratek scope60
Not applicable396
Critical2
High264
Medium247
Low17
blocked by ARMR today1
not blocked529
Exploited8
Working exploit published109
Forecast only2
No public exploit411
2008486
Mitigation candidate2
No exploit published46
Outside Waratek scope31
Not applicable407
Critical4
High239
Medium220
Low23
not blocked486
Exploited4
Working exploit published87
Proof of concept only2
Forecast only5
No public exploit388
2009525
Protected by Waratek2
Mitigation candidate2
No exploit published61
Outside Waratek scope33
Not applicable427
Critical6
High240
Medium248
Low31
blocked by ARMR today2
not blocked523
Exploited31
Working exploit published78
Forecast only1
No public exploit415
2010547
Protected by Waratek2
Mitigation candidate1
No exploit published32
Outside Waratek scope33
Not applicable479
Critical5
High209
Medium286
Low47
blocked by ARMR today2
not blocked545
Exploited13
Working exploit published92
Forecast only6
No public exploit436
2011448
Protected by Waratek1
Mitigation candidate2
No exploit published30
Outside Waratek scope54
Not applicable361
Critical3
High176
Medium234
Low35
blocked by ARMR today1
not blocked447
Exploited11
Working exploit published48
Proof of concept only1
Forecast only3
No public exploit385
2012427
Protected by Waratek2
Mitigation candidate2
No exploit published30
Outside Waratek scope30
Not applicable363
Critical7
High158
Medium228
Low34
blocked by ARMR today2
not blocked425
Exploited16
Working exploit published39
Proof of concept only4
Forecast only1
No public exploit367
2013481
Protected by Waratek4
No exploit published26
Outside Waratek scope28
Not applicable423
Critical8
High214
Medium219
Low40
blocked by ARMR today4
not blocked477
Exploited20
Working exploit published35
Proof of concept only1
Forecast only8
No public exploit417
2014613
Protected by Waratek2
Mitigation candidate4
No exploit published29
Outside Waratek scope77
Not applicable501
Critical13
High172
Medium359
Low69
blocked by ARMR today2
not blocked611
Exploited27
Working exploit published33
Proof of concept only1
Forecast only4
No public exploit548
2015684
Protected by Waratek1
Mitigation candidate1
No exploit published22
Outside Waratek scope68
Not applicable592
Critical15
High275
Medium324
Low70
blocked by ARMR today1
not blocked683
Exploited29
Working exploit published73
Proof of concept only2
Forecast only5
No public exploit575
2016711
Protected by Waratek6
Mitigation candidate2
No exploit published49
Outside Waratek scope33
Not applicable621
Critical71
High372
Medium235
Low33
blocked by ARMR today6
not blocked705
Exploited33
Working exploit published86
Proof of concept only3
Forecast only14
No public exploit575
20171,055
Protected by Waratek30
Mitigation candidate3
No exploit published58
Outside Waratek scope75
Not applicable889
Critical134
High428
Medium468
Low25
blocked by ARMR today28
partly blocked2
not blocked1,025
Exploited40
Working exploit published159
Proof of concept only4
Forecast only4
No public exploit848
20181,511
Protected by Waratek50
No exploit published71
Outside Waratek scope103
Not applicable1,287
Critical239
High644
Medium606
Low22
blocked by ARMR today49
partly blocked1
not blocked1,461
Exploited50
Working exploit published100
Proof of concept only10
Forecast only7
No public exploit1,344
20191,560
Protected by Waratek38
Mitigation candidate1
No exploit published68
Outside Waratek scope188
Not applicable1,265
Critical164
High675
Medium689
Low32
blocked by ARMR today37
partly blocked1
not blocked1,522
Exploited68
Working exploit published82
Proof of concept only24
Forecast only18
No public exploit1,368
20201,900
Protected by Waratek42
Mitigation candidate8
No exploit published95
Outside Waratek scope80
Not applicable1,675
Critical141
High1,037
Medium693
Low29
blocked by ARMR today42
not blocked1,858
Exploited61
Working exploit published27
Proof of concept only25
Forecast only12
No public exploit1,775
20211,399
Protected by Waratek37
Mitigation candidate4
No exploit published86
Outside Waratek scope46
Not applicable1,226
Critical150
High757
Medium473
Low19
blocked by ARMR today37
not blocked1,362
Exploited81
Working exploit published21
Proof of concept only34
Forecast only22
No public exploit1,241
20221,415
Protected by Waratek22
Rule in development1
Mitigation candidate1
No exploit published61
Outside Waratek scope48
Not applicable1,282
Critical162
High786
Medium452
Low15
blocked by ARMR today22
not blocked1,393
Exploited51
Working exploit published15
Proof of concept only75
Forecast only19
No public exploit1,255
20231,476
Protected by Waratek12
Mitigation candidate6
No exploit published55
Outside Waratek scope31
Not applicable1,372
Critical154
High828
Medium472
Low22
blocked by ARMR today12
not blocked1,463
not established1
Exploited61
Working exploit published13
Proof of concept only95
Forecast only22
No public exploit1,285
20241,464
Protected by Waratek16
Mitigation candidate4
No exploit published67
Outside Waratek scope15
Not applicable1,362
Critical111
High845
Medium483
Low25
blocked by ARMR today15
partly blocked1
not blocked1,448
Exploited51
Working exploit published18
Proof of concept only85
Forecast only9
No public exploit1,301
20251,875
Protected by Waratek11
Rule in development2
Mitigation candidate7
No exploit published69
Outside Waratek scope5
Not applicable1,781
Critical123
High955
Medium755
Low42
blocked by ARMR today11
not blocked1,864
Exploited55
Working exploit published22
Proof of concept only194
Forecast only1
No public exploit1,603
20264,585
Protected by Waratek22
Mitigation candidate2
No exploit published188
Outside Waratek scope5
Not applicable4,368
Critical334
High2,814
Medium1,366
Low71
blocked by ARMR today22
not blocked4,563
Exploited50
Working exploit published15
Proof of concept only152
No public exploit4,368
199319961999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-97844 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97843 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97842 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97841 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97840 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97839 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97838 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97837 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97836 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97835 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97834 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97833 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97832 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97831 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97830 | High | 2026-10-13 | Not applicable | No public exploit | Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-97829 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97828 | Medium | 2026-10-13 | Not applicable | No public exploit | Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97827 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97826 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97825 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97824 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97823 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97822 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97821 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97820 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97819 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97817 | Medium | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97816 | Critical | 2026-10-13 | Not applicable | No public exploit | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97815 | Critical | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97814 | Critical | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97813 | Medium | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. |
| CVE-2026-97812 | High | 2026-10-13 | Not applicable | No public exploit | Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97811 | High | 2026-10-13 | Not applicable | No public exploit | Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97810 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97809 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97808 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97807 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97806 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97805 | Critical | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97804 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97798 | High | 2026-10-13 | Not applicable | Proof of concept only | Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97794 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97793 | High | 2026-10-13 | Not applicable | Proof of concept only | Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97792 | High | 2026-10-13 | Not applicable | No public exploit | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97790 | Medium | 2026-10-13 | Not applicable | No public exploit | Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally. |
| CVE-2026-97789 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97788 | High | 2026-10-13 | Not applicable | No public exploit | Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97787 | High | 2026-10-13 | Not applicable | No public exploit | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97783 | High | 2026-10-13 | Not applicable | No public exploit | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-97782 | Medium | 2026-10-13 | Not applicable | No public exploit | Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. |
| CVE-2026-97780 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97779 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97778 | High | 2026-10-13 | Not applicable | No public exploit | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97777 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97776 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97775 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97773 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97772 | High | 2026-10-13 | Not applicable | No public exploit | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97771 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97770 | High | 2026-10-13 | Not applicable | No public exploit | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97769 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97768 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97767 | High | 2026-10-13 | Not applicable | No public exploit | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97766 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97765 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97763 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97762 | High | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97760 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97758 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97757 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97756 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97755 | High | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97754 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97753 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97752 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97751 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97750 | High | 2026-10-13 | Not applicable | No public exploit | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97748 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97747 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97746 | High | 2026-10-13 | Not applicable | No public exploit | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97742 | High | 2026-10-13 | Not applicable | No public exploit | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97740 | Medium | 2026-10-13 | Not applicable | No public exploit | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97739 | High | 2026-10-13 | Not applicable | No public exploit | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97738 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97017 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97010 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97008 | High | 2026-10-13 | Not applicable | No public exploit | Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97007 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97004 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97003 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96956 | High | 2026-10-13 | Not applicable | No public exploit | Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-96953 | High | 2026-10-13 | Not applicable | No public exploit | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
| CVE-2026-96952 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96951 | High | 2026-10-13 | Not applicable | Exploited | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-96950 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96949 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96948 | Medium | 2026-10-13 | Not applicable | No public exploit | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. |
| CVE-2026-96947 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96946 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96945 | High | 2026-10-13 | Not applicable | No public exploit | Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |