Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Lowswoosh has email-derived URL path injection in Microsoft Graph endpointCVE-2026-54893 · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · Hex, MicrosoftOct 16, 2026
High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-96199 · Microsoft · CSAF Advisories · Chrome, EdgeOct 16, 2026
High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-96198 · Microsoft · CSAF Advisories · Chrome, EdgeOct 16, 2026
UnknownMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-85898 · Microsoft · CSAF Advisories · Chrome, EdgeOct 16, 2026
High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-85897 · Microsoft · CSAF Advisories · Chrome, EdgeOct 16, 2026
High8.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-85890 · Microsoft · CSAF Advisories · Chrome, EdgeOct 16, 2026
UnknownMicrosoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-83831 · Microsoft · CSAF Advisories · Chrome, EdgeOct 16, 2026
High7.5Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.CVE-2026-109468 · Microsoft · Microsoft Visual Studio 2022 version 17.14 · CSAF Advisories · CVE.org · FIRST EPSS · MicrosoftEPSS 0.6%Oct 15, 2026
High8.8Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.CVE-2026-108452 · Microsoft · SharePoint · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.6%Oct 15, 2026
High8.8Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108451 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108450 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108449 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High7.5Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.CVE-2026-108448 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.3%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108447 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-108446 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108445 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Microsoft Office Remote Code Execution VulnerabilityCVE-2026-108444 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108443 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108442 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108441 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108440 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108439 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
Medium6.5Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108438 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026
High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108437 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.4%Oct 15, 2026
Medium6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108436 · Microsoft · Microsoft 365 · CVE.org · FIRST EPSS · Microsoft Security Update Guide · Microsoft, Microsoft 365EPSS 0.5%Oct 15, 2026