CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

42.824 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-96234 Medium · 5.3 CWE-346 Oct 13, 2026
.NET Information Disclosure Vulnerability
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96229 Medium · 6.5 CWE-183 Oct 13, 2026
.NET Information Disclosure Vulnerability
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96218 Medium · 5.5 CWE-15 Oct 13, 2026
Windows Update Stack Tampering Vulnerability
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
CVE-2026-96206 Medium · 5.5 CWE-908 Oct 13, 2026
Windows Subsystem for Linux Information Disclosure Vulnerability
Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.
CVE-2026-96204 Medium · 6.5 CWE-918 Oct 13, 2026
Azure Arc Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.
CVE-2026-96183 Medium · 5.5 CWE-306 Oct 13, 2026
Windows Health and Optimized Experiences Service Information Disclosure Vulnerability
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
CVE-2026-95904 Medium · 5.5 CWE-126 Oct 13, 2026
Windows Event Logging Service Information Disclosure Vulnerability
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-95630 Medium · 4.3 CWE-20 Oct 13, 2026
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.
CVE-2026-94506 Medium · 6.5 CWE-125 Oct 13, 2026
Microsoft Office Access Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.
CVE-2026-88226 Medium · 4.6 CWE-125 Oct 13, 2026
Windows Storage Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-88209 Medium · 4.6 CWE-79 Oct 13, 2026
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88208 Medium · 4.6 CWE-79 Oct 13, 2026
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-88203 Medium · 6.5 CWE-822 Oct 13, 2026
Microsoft Office PowerPoint Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88201 Medium · 6.5 CWE-126 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88195 Medium · 6.5 CWE-126 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88192 Medium · 6.5 CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88190 Medium · 6.5 CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88184 Medium · 6.5 CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88183 Medium · 6.5 CWE-125 Oct 13, 2026
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88175 Medium · 6.5 CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88172 Medium · 6.5 CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88169 Medium · 6.5 CWE-125 Oct 13, 2026
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88167 Medium · 6.5 CWE-126 Oct 13, 2026
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88162 Medium · 5.5 CWE-863 Oct 13, 2026
Windows Encrypting File System (EFS) Tampering Vulnerability
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
CVE-2026-88158 Medium · 5.5 CWE-125 Oct 13, 2026
Microsoft Digest Authentication Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.