Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-88206
Alta · 7.5
CWE-918 13/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88204
Alta · 7.3
CWE-79 13/10/2026
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88202
Alta · 8.8
CWE-122 13/10/2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88200
Alta · 8.8
CWE-270 13/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88198
Alta · 8.8
CWE-862 13/10/2026
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-88197
Alta · 8.8
CWE-122 13/10/2026
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-88196
Alta · 8.8
CWE-122 13/10/2026
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-88194
Alta · 7.8
CWE-125 13/10/2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88193
Alta · 7.8
CWE-122 13/10/2026
Microsoft Scripting Engine Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.
CVE-2026-88191
Alta · 7.8
CWE-59 13/10/2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-88189
Alta · 7.8
CWE-125 13/10/2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88188
Alta · 7.8
CWE-125 13/10/2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88186
Alta · 8.8
CWE-122 13/10/2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88185
Alta · 8.1
CWE-122 13/10/2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88182
Alta · 7.8
CWE-416 13/10/2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-88181
Alta · 7.8
CWE-125 13/10/2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88180
Alta · 7.8
CWE-125 13/10/2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88179
Alta · 7.8
CWE-125 13/10/2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88177
Alta · 7.8
CWE-125 13/10/2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-88174
Alta · 8.1
CWE-362 13/10/2026
Windows Deployment Services Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
CVE-2026-88173
Alta · 8.1
CWE-367 13/10/2026
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
CVE-2026-88171
Alta · 8.1
CWE-415 13/10/2026
Windows DHCP Server Remote Code Execution Vulnerability
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88168
Alta · 7.8
CWE-122 13/10/2026
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-88166
Alta · 8.8
CWE-121 13/10/2026
Microsoft Office SharePoint Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-88165
Alta · 8.8
CWE-787 13/10/2026
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.