Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108445 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Microsoft Office Remote Code Execution VulnerabilityVuln · CVE-2026-108444 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108443 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108442 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108441 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108440 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108439 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
Medium6.5Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.Vuln · CVE-2026-108438 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108437 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
Medium6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.Vuln · CVE-2026-108436 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
Medium6.5Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.Vuln · CVE-2026-108435 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
Medium6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.Vuln · CVE-2026-108434 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High7.8Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.Vuln · CVE-2026-108433 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.3%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108432 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108431 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108430 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108429 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108428 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108427 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Vuln · CVE-2026-108426 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
Medium4.6Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmationVuln · CVE-2026-104024 · PeaZip · PeaZip · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Oct 15, 2026
Medium5.4Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQueryVuln · CVE-2026-106148 · Progress Software · Kendo UI for jQuery · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 15, 2026
Medium5.4Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQueryVuln · CVE-2026-106147 · Progress Software · Kendo UI for jQuery · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 15, 2026
Medium5.4Cross-Site Scripting via Badge Text Binding in Kendo UI for jQueryVuln · CVE-2026-106161 · Progress Software · Kendo UI for jQuery · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 15, 2026
Medium5.4Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQueryVuln · CVE-2026-106160 · Progress Software · Kendo UI for jQuery · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 15, 2026