Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium6.5Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108435 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
Medium6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108434 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High7.8Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.CVE-2026-108433 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.3%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108432 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108431 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108430 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108429 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108428 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108427 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108426 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
Medium5.3Microsoft Identity Web Elevation of Privilege VulnerabilityCVE-2026-80092 · Microsoft · CSAF Advisories · MicrosoftOct 15, 2026
Medium5.9Microsoft Authentication Library (MSAL) for Node.js Information Disclosure VulnerabilityCVE-2026-109461 · Microsoft · CSAF Advisories · Microsoft, Node.jsOct 15, 2026
Medium6.5Microsoft Office PowerPoint Information Disclosure VulnerabilityCVE-2026-108455 · Microsoft · Microsoft 365 · CSAF Advisories · CVE.org · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
Medium6.5Microsoft Office PowerPoint Information Disclosure VulnerabilityCVE-2026-108454 · Microsoft · Microsoft 365 · CSAF Advisories · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
Medium6.5Microsoft Office PowerPoint Information Disclosure VulnerabilityCVE-2026-108453 · Microsoft · Microsoft 365 · CSAF Advisories · CVE.org · FIRST EPSS · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High7.0n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression val…CVE-2026-110840 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 14, 2026
Medium5.3The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capabil…CVE-2026-87968 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%Oct 14, 2026
High7.8Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege VulnerabilityCVE-2026-96225 · CVE.org · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · Microsoft, NuGetOct 13, 2026
High8.8Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution VulnerabilityCVE-2026-96230 · CVE.org · GitHub Advisory Database · Microsoft, NuGetOct 13, 2026
High7.5Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service VulnerabilityCVE-2026-96959 · CVE.org · GitHub Advisory Database · Microsoft, NuGetOct 13, 2026
Medium5.3Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure VulnerabilityCVE-2026-96234 · CVE.org · GitHub Advisory Database · Microsoft, NuGetOct 13, 2026
High7.4Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing VulnerabilityCVE-2026-96222 · CVE.org · GitHub Advisory Database · Microsoft, NuGetOct 13, 2026
High7.8Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege VulnerabilityCVE-2026-96231 · CVE.org · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · Microsoft, NuGetOct 13, 2026
Medium5.9Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure VulnerabilityCVE-2026-85790 · CVE.org · GitHub Advisory Database · Microsoft, NuGetOct 13, 2026
UnknownCVE-2026-70229 is listed by Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities.CVE-2026-70229 · Cisco · Talos · Cisco Talos · Cisco, MicrosoftOct 13, 2026