microsoft Vulnerability Advisory Catalog

Total 14,846 security vulnerabilities recorded for microsoft software and firmware.

← Back to All Vendors
Component: windows_10_1607

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_11_24h2

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network....

📅 2026-07-14
CVSS 8.3 Dossier →
Component: defender_for_endpoint

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1607

Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1809

Use after free in Windows WebView allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.0 Dossier →
Component: windows_10_21h2

Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network....

📅 2026-07-14
CVSS 6.5 Dossier →
CVE-2026-56159 CRITICAL
Component: windows_10_1607

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 9.8 Dossier →
Component: sharepoint_server

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network....

📅 2026-07-14
CVSS 5.4 Dossier →
Component: 365_apps

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: 365_apps

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: 365_apps

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
CVE-2026-55944 CRITICAL
Component: dynamics_nav

Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 9.8 Dossier →
Component: 365_apps

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally....

📅 2026-07-14
CVSS 6.1 Dossier →
Component: copilot

Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tamper...

📅 2026-07-14
CVSS 6.3 Dossier →
Component: 365_apps

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: 365_apps

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: 365_apps

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: 365_apps

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: 365_apps

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: 365_apps

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: 365_apps

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: sharepoint_server

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to p...

📅 2026-07-14
CVSS 4.6 Dossier →
Component: 365_apps

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Page 5 of 619 (14,846 Total Records)