microsoft Vulnerability Advisory Catalog

Total 14,846 security vulnerabilities recorded for microsoft software and firmware.

← Back to All Vendors
Component: 365_apps

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: 365_apps

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: 365_apps

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: sharepoint_server

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to p...

📅 2026-07-14
CVSS 7.3 Dossier →
Component: sharepoint_server

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to p...

📅 2026-07-14
CVSS 4.6 Dossier →
Component: sharepoint_server

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to p...

📅 2026-07-14
CVSS 4.6 Dossier →
Component: 365_apps

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: 365_apps

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: sharepoint_server

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to p...

📅 2026-07-14
CVSS 4.6 Dossier →
CVE-2026-55010 CRITICAL
Component: minecraft_bedrock_dedicated_server

Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 9.8 Dossier →
Component: 365_apps

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 8.4 Dossier →
Component: windows_10_1607

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network....

📅 2026-07-14
CVSS 6.5 Dossier →
Component: windows_10_1809

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevat...

📅 2026-07-14
CVSS 7.8 Dossier →
Component: terminal

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: sql_server_2025

Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network....

📅 2026-07-14
CVSS 6.5 Dossier →
Component: windows_10_1607

Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1607

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally....

📅 2026-07-14
CVSS 5.5 Dossier →
Component: windows_10_1809

Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_10_1607

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 7.8 Dossier →
Component: windows_11_24h2

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally....

📅 2026-07-14
CVSS 8.8 Dossier →
Component: windows_10_1607

Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network....

📅 2026-07-14
CVSS 8.1 Dossier →
Page 8 of 619 (14,846 Total Records)