Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-96234
Medium · 5.3
CWE-346 Oct 13, 2026
.NET Information Disclosure Vulnerability
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96229
Medium · 6.5
CWE-183 Oct 13, 2026
.NET Information Disclosure Vulnerability
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96218
Medium · 5.5
CWE-15 Oct 13, 2026
Windows Update Stack Tampering Vulnerability
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
CVE-2026-96206
Medium · 5.5
CWE-908 Oct 13, 2026
Windows Subsystem for Linux Information Disclosure Vulnerability
Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.
CVE-2026-96204
Medium · 6.5
CWE-918 Oct 13, 2026
Azure Arc Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.
CVE-2026-96183
Medium · 5.5
CWE-306 Oct 13, 2026
Windows Health and Optimized Experiences Service Information Disclosure Vulnerability
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
CVE-2026-95904
Medium · 5.5
CWE-126 Oct 13, 2026
Windows Event Logging Service Information Disclosure Vulnerability
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-95630
Medium · 4.3
CWE-20 Oct 13, 2026
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.
CVE-2026-94506
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Access Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.
CVE-2026-88226
Medium · 4.6
CWE-125 Oct 13, 2026
Windows Storage Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-88209
Medium · 4.6
CWE-79 Oct 13, 2026
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88208
Medium · 4.6
CWE-79 Oct 13, 2026
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88203
Medium · 6.5
CWE-822 Oct 13, 2026
Microsoft Office PowerPoint Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88201
Medium · 6.5
CWE-126 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88195
Medium · 6.5
CWE-126 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88192
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88190
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88184
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88183
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88175
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88172
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88169
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88167
Medium · 6.5
CWE-126 Oct 13, 2026
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88162
Medium · 5.5
CWE-863 Oct 13, 2026
Windows Encrypting File System (EFS) Tampering Vulnerability
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
CVE-2026-88158
Medium · 5.5
CWE-125 Oct 13, 2026
Microsoft Digest Authentication Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.