https://vulnogram.org/ Most recent CVEs assigned by Microsoft Corporation (microsoft). https://vulnogram.org/seaview/icons/microsoft.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-80092 https://vulnogram.org/CVE-2026-80092 Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network. Medium Fri, 16 Oct 2026 17:12:01 GMT https://vulnogram.org/CVE-2026-109461 https://vulnogram.org/CVE-2026-109461 Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network. Medium Fri, 16 Oct 2026 17:11:24 GMT https://vulnogram.org/CVE-2026-109468 https://vulnogram.org/CVE-2026-109468 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. High Thu, 15 Oct 2026 20:57:33 GMT https://vulnogram.org/CVE-2026-108455 https://vulnogram.org/CVE-2026-108455 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. Medium Thu, 15 Oct 2026 20:57:31 GMT https://vulnogram.org/CVE-2026-108454 https://vulnogram.org/CVE-2026-108454 Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. Medium Thu, 15 Oct 2026 20:57:31 GMT https://vulnogram.org/CVE-2026-108453 https://vulnogram.org/CVE-2026-108453 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. Medium Thu, 15 Oct 2026 20:57:30 GMT https://vulnogram.org/CVE-2026-108452 https://vulnogram.org/CVE-2026-108452 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:30 GMT https://vulnogram.org/CVE-2026-108451 https://vulnogram.org/CVE-2026-108451 Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:29 GMT https://vulnogram.org/CVE-2026-108450 https://vulnogram.org/CVE-2026-108450 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:29 GMT https://vulnogram.org/CVE-2026-108449 https://vulnogram.org/CVE-2026-108449 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:28 GMT https://vulnogram.org/CVE-2026-108448 https://vulnogram.org/CVE-2026-108448 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:27 GMT https://vulnogram.org/CVE-2026-108447 https://vulnogram.org/CVE-2026-108447 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:27 GMT https://vulnogram.org/CVE-2026-108446 https://vulnogram.org/CVE-2026-108446 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:27 GMT https://vulnogram.org/CVE-2026-108445 https://vulnogram.org/CVE-2026-108445 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:26 GMT https://vulnogram.org/CVE-2026-108444 https://vulnogram.org/CVE-2026-108444 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:25 GMT https://vulnogram.org/CVE-2026-108443 https://vulnogram.org/CVE-2026-108443 Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:25 GMT https://vulnogram.org/CVE-2026-108442 https://vulnogram.org/CVE-2026-108442 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:24 GMT https://vulnogram.org/CVE-2026-108441 https://vulnogram.org/CVE-2026-108441 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:24 GMT https://vulnogram.org/CVE-2026-108440 https://vulnogram.org/CVE-2026-108440 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:23 GMT https://vulnogram.org/CVE-2026-108439 https://vulnogram.org/CVE-2026-108439 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:23 GMT https://vulnogram.org/CVE-2026-108438 https://vulnogram.org/CVE-2026-108438 Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Medium Thu, 15 Oct 2026 20:57:22 GMT https://vulnogram.org/CVE-2026-108437 https://vulnogram.org/CVE-2026-108437 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:22 GMT https://vulnogram.org/CVE-2026-108436 https://vulnogram.org/CVE-2026-108436 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Medium Thu, 15 Oct 2026 20:57:21 GMT https://vulnogram.org/CVE-2026-108435 https://vulnogram.org/CVE-2026-108435 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Medium Thu, 15 Oct 2026 20:57:21 GMT https://vulnogram.org/CVE-2026-108434 https://vulnogram.org/CVE-2026-108434 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. Medium Thu, 15 Oct 2026 20:57:20 GMT https://vulnogram.org/CVE-2026-108433 https://vulnogram.org/CVE-2026-108433 Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. High Thu, 15 Oct 2026 20:57:20 GMT https://vulnogram.org/CVE-2026-108432 https://vulnogram.org/CVE-2026-108432 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:19 GMT https://vulnogram.org/CVE-2026-108431 https://vulnogram.org/CVE-2026-108431 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:19 GMT https://vulnogram.org/CVE-2026-108430 https://vulnogram.org/CVE-2026-108430 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:18 GMT https://vulnogram.org/CVE-2026-108429 https://vulnogram.org/CVE-2026-108429 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:18 GMT https://vulnogram.org/CVE-2026-108428 https://vulnogram.org/CVE-2026-108428 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:18 GMT https://vulnogram.org/CVE-2026-108427 https://vulnogram.org/CVE-2026-108427 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:17 GMT https://vulnogram.org/CVE-2026-108426 https://vulnogram.org/CVE-2026-108426 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. High Thu, 15 Oct 2026 20:57:16 GMT https://vulnogram.org/CVE-2026-88164 https://vulnogram.org/CVE-2026-88164 Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. High Wed, 14 Oct 2026 17:50:07 GMT https://vulnogram.org/CVE-2026-94520 https://vulnogram.org/CVE-2026-94520 Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network. Medium Tue, 13 Oct 2026 20:37:27 GMT https://vulnogram.org/CVE-2026-94512 https://vulnogram.org/CVE-2026-94512 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. High Tue, 13 Oct 2026 20:37:27 GMT https://vulnogram.org/CVE-2026-88089 https://vulnogram.org/CVE-2026-88089 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. Medium Tue, 13 Oct 2026 20:37:23 GMT https://vulnogram.org/CVE-2026-88085 https://vulnogram.org/CVE-2026-88085 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. Medium Tue, 13 Oct 2026 20:37:23 GMT https://vulnogram.org/CVE-2026-88088 https://vulnogram.org/CVE-2026-88088 Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally. High Tue, 13 Oct 2026 20:37:23 GMT https://vulnogram.org/CVE-2026-85919 https://vulnogram.org/CVE-2026-85919 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. High Tue, 13 Oct 2026 20:37:23 GMT https://vulnogram.org/CVE-2026-88086 https://vulnogram.org/CVE-2026-88086 Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network. Medium Tue, 13 Oct 2026 20:37:23 GMT https://vulnogram.org/CVE-2026-88084 https://vulnogram.org/CVE-2026-88084 Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network. Medium Tue, 13 Oct 2026 20:37:23 GMT https://vulnogram.org/CVE-2026-85888 https://vulnogram.org/CVE-2026-85888 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. High Tue, 13 Oct 2026 20:37:22 GMT https://vulnogram.org/CVE-2026-88081 https://vulnogram.org/CVE-2026-88081 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. High Tue, 13 Oct 2026 20:37:22 GMT https://vulnogram.org/CVE-2026-88083 https://vulnogram.org/CVE-2026-88083 Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. High Tue, 13 Oct 2026 20:37:22 GMT https://vulnogram.org/CVE-2026-88082 https://vulnogram.org/CVE-2026-88082 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. High Tue, 13 Oct 2026 20:37:22 GMT https://vulnogram.org/CVE-2026-62840 https://vulnogram.org/CVE-2026-62840 Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally. High Tue, 13 Oct 2026 20:37:15 GMT https://vulnogram.org/CVE-2026-67628 https://vulnogram.org/CVE-2026-67628 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. Medium Tue, 13 Oct 2026 20:37:01 GMT https://vulnogram.org/CVE-2026-67626 https://vulnogram.org/CVE-2026-67626 Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network. Medium Tue, 13 Oct 2026 20:37:01 GMT https://vulnogram.org/CVE-2026-65674 https://vulnogram.org/CVE-2026-65674 Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. High Tue, 13 Oct 2026 20:37:01 GMT