Overview 13,167 matches · 593 in Waratek scope · 104 protected · 487 exploited · 300 CISA KEV · 1,272 public PoC · 512 EPSS ≥ 0.5
13,167matches
593in Waratek scope4.5%
104protected0.8%
487exploited3.7%
300CISA KEV2.3%
1,272public PoC9.7%
512EPSS ≥ 0.53.9%
Protected by Waratek
106
0.8%
Rule in development
2
0.0%
Mitigation candidate
20
0.2%
No exploit published
465
3.5%
Outside Waratek scope
367
2.8%
Not applicable
12,207
92.7%
Withdrawn CVE
0
0.0%
blocked by ARMR today
104
0.8%
partly blocked
2
0.0%
not blocked
13,061
99.2%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 2,814 / year
19931
Not applicable1
High1
not blocked1
No public exploit1
19944
Not applicable4
High4
not blocked4
No public exploit4
19951
Not applicable1
High1
not blocked1
Working exploit published1
19965
Not applicable5
High5
not blocked5
Working exploit published2
Forecast only1
No public exploit2
199710
Not applicable10
High10
not blocked10
Working exploit published2
No public exploit8
199814
Not applicable14
High14
not blocked14
Working exploit published6
No public exploit8
199951
No exploit published1
Not applicable50
High51
not blocked51
Working exploit published19
No public exploit32
200060
Mitigation candidate2
No exploit published3
Outside Waratek scope2
Not applicable53
High60
not blocked60
Exploited1
Working exploit published25
Forecast only1
No public exploit33
2001102
Protected by Waratek1
No exploit published3
Outside Waratek scope4
Not applicable94
High102
blocked by ARMR today1
not blocked101
Exploited3
Working exploit published27
No public exploit72
2002151
Protected by Waratek1
Mitigation candidate1
No exploit published5
Outside Waratek scope7
Not applicable137
High151
blocked by ARMR today1
not blocked150
Exploited3
Working exploit published49
Forecast only3
No public exploit96
200378
No exploit published2
Outside Waratek scope4
Not applicable72
High78
not blocked78
Exploited5
Working exploit published30
No public exploit43
2004141
No exploit published4
Outside Waratek scope3
Not applicable134
High141
not blocked141
Exploited3
Working exploit published43
No public exploit95
2005211
No exploit published13
Outside Waratek scope8
Not applicable190
High211
not blocked211
Exploited3
Working exploit published54
Forecast only3
No public exploit151
2006250
Protected by Waratek1
No exploit published32
Outside Waratek scope61
Not applicable156
High250
blocked by ARMR today1
not blocked249
Exploited2
Working exploit published52
Proof of concept only1
Forecast only3
No public exploit192
2007264
No exploit published35
Outside Waratek scope16
Not applicable213
High264
not blocked264
Exploited7
Working exploit published53
Forecast only2
No public exploit202
2008239
No exploit published17
Outside Waratek scope15
Not applicable207
High239
not blocked239
Exploited3
Working exploit published44
Proof of concept only1
Forecast only4
No public exploit187
2009240
No exploit published13
Outside Waratek scope7
Not applicable220
High240
not blocked240
Exploited23
Working exploit published34
No public exploit183
2010209
Protected by Waratek1
No exploit published4
Outside Waratek scope8
Not applicable196
High209
blocked by ARMR today1
not blocked208
Exploited10
Working exploit published48
Forecast only6
No public exploit145
2011176
Mitigation candidate1
No exploit published2
Outside Waratek scope5
Not applicable168
High176
not blocked176
Exploited8
Working exploit published22
Forecast only1
No public exploit145
2012158
Protected by Waratek1
No exploit published3
Outside Waratek scope3
Not applicable151
High158
blocked by ARMR today1
not blocked157
Exploited9
Working exploit published10
Proof of concept only3
Forecast only1
No public exploit135
2013214
Protected by Waratek3
No exploit published3
Outside Waratek scope9
Not applicable199
High214
blocked by ARMR today3
not blocked211
Exploited16
Working exploit published15
Proof of concept only1
Forecast only5
No public exploit177
2014172
No exploit published2
Outside Waratek scope9
Not applicable161
High172
not blocked172
Exploited19
Working exploit published16
No public exploit137
2015275
No exploit published3
Outside Waratek scope16
Not applicable256
High275
not blocked275
Exploited15
Working exploit published50
Forecast only2
No public exploit208
2016372
Protected by Waratek2
Mitigation candidate2
No exploit published12
Outside Waratek scope15
Not applicable341
High372
blocked by ARMR today2
not blocked370
Exploited19
Working exploit published49
Proof of concept only1
Forecast only9
No public exploit294
2017428
Protected by Waratek12
Mitigation candidate1
No exploit published21
Outside Waratek scope22
Not applicable372
High428
blocked by ARMR today10
partly blocked2
not blocked416
Exploited32
Working exploit published44
Proof of concept only2
Forecast only3
No public exploit347
2018644
Protected by Waratek9
No exploit published26
Outside Waratek scope41
Not applicable568
High644
blocked by ARMR today9
not blocked635
Exploited31
Working exploit published44
Proof of concept only4
Forecast only3
No public exploit562
2019675
Protected by Waratek4
No exploit published17
Outside Waratek scope57
Not applicable597
High675
blocked by ARMR today4
not blocked671
Exploited44
Working exploit published55
Proof of concept only14
Forecast only10
No public exploit552
20201,037
Protected by Waratek14
Mitigation candidate4
No exploit published41
Outside Waratek scope25
Not applicable953
High1,037
blocked by ARMR today14
not blocked1,023
Exploited30
Working exploit published11
Proof of concept only16
Forecast only8
No public exploit972
2021757
Protected by Waratek18
Mitigation candidate3
No exploit published34
Outside Waratek scope20
Not applicable682
High757
blocked by ARMR today18
not blocked739
Exploited45
Working exploit published7
Proof of concept only12
Forecast only12
No public exploit681
2022786
Protected by Waratek9
Rule in development1
Mitigation candidate1
No exploit published17
Outside Waratek scope6
Not applicable752
High786
blocked by ARMR today9
not blocked777
Exploited33
Working exploit published9
Proof of concept only32
Forecast only15
No public exploit697
2023828
Protected by Waratek9
Mitigation candidate1
No exploit published21
Outside Waratek scope1
Not applicable796
High828
blocked by ARMR today9
not blocked819
Exploited37
Working exploit published7
Proof of concept only47
Forecast only15
No public exploit722
2024845
Protected by Waratek9
Mitigation candidate2
No exploit published20
Outside Waratek scope1
Not applicable813
High845
blocked by ARMR today9
not blocked836
Exploited35
Working exploit published10
Proof of concept only48
Forecast only8
No public exploit744
2025955
Protected by Waratek2
Rule in development1
Mitigation candidate1
No exploit published29
Outside Waratek scope2
Not applicable920
High955
blocked by ARMR today2
not blocked953
Exploited29
Working exploit published10
Proof of concept only56
Forecast only1
No public exploit859
20262,814
Protected by Waratek10
Mitigation candidate1
No exploit published82
Not applicable2,721
High2,814
blocked by ARMR today10
not blocked2,804
Exploited22
Working exploit published8
Proof of concept only74
No public exploit2,710
199319961999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-119618 | High | 2026-11-11 | Not applicable | Proof of concept only | Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of mod_h2 from GitHub: from 2.0.8 through 2.0.42. |
| CVE-2026-118711 | High | 2026-11-10 | Not applicable | No public exploit | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118710 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118709 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118708 | High | 2026-11-10 | Not applicable | No public exploit | Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118707 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118706 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118705 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118704 | High | 2026-11-10 | Not applicable | No public exploit | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118703 | High | 2026-11-10 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118701 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118700 | High | 2026-11-10 | Not applicable | No public exploit | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118302 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118301 | High | 2026-11-10 | Not applicable | No public exploit | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118299 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118298 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118297 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118296 | High | 2026-11-10 | Not applicable | No public exploit | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118295 | High | 2026-11-10 | Not applicable | No public exploit | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118294 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118293 | High | 2026-11-10 | Not applicable | No public exploit | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-118292 | High | 2026-11-10 | Not applicable | No public exploit | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-116927 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-120733 | High | 2026-11-03 | Not applicable | No public exploit | Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the database or a database backup to obtain users' TOTP shared secrets via the unencrypted copy of the security key written when an administrator saves a user. |
| CVE-2026-120715 | High | 2026-11-03 | Not applicable | No public exploit | Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an authenticated low-privileged user to capture the NetNTLMv2 hash of the DVLS service account via an attacker-controlled domain name in the request. |
| CVE-2026-119636 | High | 2026-11-03 | Not applicable | No public exploit | Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.22.0 allows an authenticated user with checkout rights on a PAM account to retain access to that account on the target system after the checkout expires via a backlog of 21 or more newer active checkouts that prevents the expired checkout from being checked in and its password from being rotated. |
| CVE-2026-112085 | High | 2026-10-22 | Not applicable | No public exploit | webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to forward WebSockets, the server forwards non-HMR WebSocket upgrade requests to the proxy target without validating the Host or Origin headers, so the allowedHosts protection does not apply to those proxied upgrades. A malicious web page visited by a developer can open a cross-origin WebSocket through the dev server and read from and write to the proxied backend, even when the server is bound to loopback. The issue is fixed in webpack-dev-server 5.2.7 and 6.1.0, where proxied WebSocket upgrades pass the same Host and Origin validation as the HMR WebSocket, and users should upgrade to one of those versions or later. As a workaround, omit WebSocket forwarding from proxy entries that do not need it and scope the proxy to specific paths. |
| CVE-2026-91502 | High | 2026-10-20 | No exploit published | No public exploit | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). |
| CVE-2026-91473 | High | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in takeover of Oracle HTTP Server. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). |
| CVE-2026-91419 | High | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in takeover of Oracle HTTP Server. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). |
| CVE-2026-87300 | High | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle Weblogic Server Proxy Plug-in accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N). |
| CVE-2026-111764 | High | 2026-10-20 | No exploit published | Proof of concept only | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no authorization on task reads: the no-argument constructor sets authorizationProvider to null, and InMemoryTaskStore.get(String taskId) returns the stored task without checking the caller or owner. Authorization depends on supplying a TaskAuthorizationProvider and routing requests through AuthorizationRequestHandlerDecorator, whether installed through CDI or explicitly by the application. Default store wiring and manually constructed DefaultRequestHandler.builder().build() handlers, including integrations such as Spring, leave task reads unprotected when no effective authorization-provider and decorator check is installed. In a multi-caller deployment using the default configuration, a caller who knows or guesses another caller's task ID can retrieve the task status, context ID, message history, and artifacts. The default/reference transport endpoints do not enforce authentication, so the task-read disclosure is reachable by an unauthenticated caller rather than requiring a privileged account. This issue is fixed in version 1.3.0.Final. |
| CVE-2026-101781 | High | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). |
| CVE-2026-101775 | High | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server, MySQL Cluster accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.4 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H). |
| CVE-2026-101773 | High | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster as well as unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H). |
| CVE-2026-101772 | High | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). |
| CVE-2026-101771 | High | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). |
| CVE-2026-101770 | High | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). |
| CVE-2026-16453 | High | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to verify the integrity of the SAML RelayState POST parameter which allows an authenticated SAML user to join any team, including invite-only teams, via forging the team_id or invite_id fields in the RelayState.. Mattermost Advisory ID: MMSA-2026-00727 |
| CVE-2026-108452 | High | 2026-10-15 | Not applicable | No public exploit | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-108446 | High | 2026-10-15 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88164 | High | 2026-10-14 | Not applicable | No public exploit | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-97830 | High | 2026-10-13 | Not applicable | No public exploit | Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-97812 | High | 2026-10-13 | Not applicable | No public exploit | Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97811 | High | 2026-10-13 | Not applicable | No public exploit | Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97810 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97809 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97808 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97807 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97806 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97804 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97798 | High | 2026-10-13 | Not applicable | Proof of concept only | Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97794 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97793 | High | 2026-10-13 | Not applicable | Proof of concept only | Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97792 | High | 2026-10-13 | Not applicable | No public exploit | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97789 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97788 | High | 2026-10-13 | Not applicable | No public exploit | Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97787 | High | 2026-10-13 | Not applicable | No public exploit | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97783 | High | 2026-10-13 | Not applicable | No public exploit | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-97780 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97778 | High | 2026-10-13 | Not applicable | No public exploit | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97777 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97776 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97775 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97773 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97772 | High | 2026-10-13 | Not applicable | No public exploit | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97771 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97770 | High | 2026-10-13 | Not applicable | No public exploit | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97769 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97768 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97767 | High | 2026-10-13 | Not applicable | No public exploit | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97766 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97765 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97763 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97762 | High | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97758 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97757 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97756 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97755 | High | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97754 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97753 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97752 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97751 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97750 | High | 2026-10-13 | Not applicable | No public exploit | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97748 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97747 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97746 | High | 2026-10-13 | Not applicable | No public exploit | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97742 | High | 2026-10-13 | Not applicable | No public exploit | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97739 | High | 2026-10-13 | Not applicable | No public exploit | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97738 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97017 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97010 | High | 2026-10-13 | Not applicable | No public exploit | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97008 | High | 2026-10-13 | Not applicable | No public exploit | Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97007 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97004 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97003 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96956 | High | 2026-10-13 | Not applicable | No public exploit | Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-96953 | High | 2026-10-13 | Not applicable | No public exploit | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
| CVE-2026-96952 | High | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96951 | High | 2026-10-13 | Not applicable | Exploited | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |