Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-88154
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88153
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88151
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88140
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Key Storage Provider Information Disclosure Vulnerability
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
CVE-2026-88137
Medium · 6.5
CWE-552 Oct 13, 2026
WebDAV Information Disclosure Vulnerability
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
CVE-2026-88132
Medium · 5.9
CWE-346 Oct 13, 2026
Azure Key Vault Information Disclosure Vulnerability
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
CVE-2026-88130
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88129
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88125
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88123
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88122
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88099
Medium · 5.9
CWE-248 Oct 13, 2026
Windows Failover Cluster Denial of Service Vulnerability
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
CVE-2026-87714
Medium · 6.5
CWE-862 Oct 13, 2026
WebDAV Security Feature Bypass Vulnerability
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
CVE-2026-87709
Medium · 5.5
CWE-250 Oct 13, 2026
Windows Host Guardian Service Tampering Vulnerability
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.
CVE-2026-87698
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Remote Access Service Infrastructure Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
CVE-2026-85939
Medium · 5.3
CWE-1390 Oct 13, 2026
Windows Kernel Security Feature Bypass Vulnerability
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
CVE-2026-85938
Medium · 5.5
CWE-862 Oct 13, 2026
Windows Broadcast DVR User Service Information Disclosure Vulnerability
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-85935
Medium · 5.5
CWE-126 Oct 13, 2026
Windows USB Driver Information Disclosure Vulnerability
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
CVE-2026-85932
Medium · 6.5
CWE-22 Oct 13, 2026
Microsoft Office SharePoint Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-85916
Medium · 5.5
CWE-359 Oct 13, 2026
Azure Active Directory Information Disclosure Vulnerability
Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.
CVE-2026-85910
Medium · 5.5
CWE-126 Oct 13, 2026
Windows StateRepository API Information Disclosure Vulnerability
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.
CVE-2026-85909
Medium · 5.5
CWE-822 Oct 13, 2026
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-85873
Medium · 6.5
CWE-639 Oct 13, 2026
Skype for Business Elevation of Privilege Vulnerability
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
CVE-2026-85866
Medium · 4.7
CWE-497 Oct 13, 2026
Windows ALPC Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.
CVE-2026-85865
Medium · 5.5
CWE-288 Oct 13, 2026
Windows DHCP Server Security Feature Bypass Vulnerability
Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.