CVE-2026-96951 — Microsoft Windows Command Injection Vulnerability (83/100)
CVE-2026-83888 — microsoft windows 10 1607: Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a networ… (38/100)
CVE-2026-65660 — Microsoft SharePoint Code Injection Vulnerability (67/100)
CVE-2026-62874 — microsoft azure billing: Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate pr… (29/100)
CVE-2026-69399 — microsoft azure arc: Azure Arc Elevation of Privilege Vulnerability (38/100)
CVE-2026-70200 — microsoft azure logic apps: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an… (38/100)
CVE-2026-70009 — microsoft azure arc: Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unautho… (38/100)
CVE-2026-81963 — Microsoft Windows Link Following Vulnerability (79/100)
CVE-2026-85880 — Microsoft Windows Heap-Based Buffer Overflow Vulnerability (79/100)
CVE-2026-67631 — microsoft sql server 2017: Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. (38/100)
CVE-2026-67643 — microsoft sql server 2022: Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. (38/100)
CVE-2026-72950 — microsoft windows 10 1607: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthor… (38/100)
CVE-2026-80098 — microsoft copilot studio: Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate… (39/100)
CVE-2026-62916 — CVE-2026-62916 — Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacke… (38/100)
CVE-2026-65818 — microsoft power platform: Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over… (38/100)
CVE-2019-1068 — Microsoft SQL Server Remote Code Execution Vulnerability (87/100)
CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability (90/100)
CVE-2026-55040 — Microsoft SharePoint Weak Authentication Vulnerability (71/100)
CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability (77/100)
CVE-2026-65768 — CVE-2026-65768 — Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android… (38/100)
CVE-2026-57104 — microsoft azure storage explorer: Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explore… (37/100)
CVE-2026-62836 — microsoft azure sql managed instance: Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an u… (30/100)
CVE-2026-58630 — microsoft azure app service for linux: Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a net… (38/100)
CVE-2026-56160 — microsoft azure red hat openshift: Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges o… (31/100)
CVE-2026-62825 — microsoft azure key vault: Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a netwo… (31/100)
CVE-2026-58275 — microsoft azure dns: Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network. (30/100)
CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (81/100)
CVE-2026-58644 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability (69/100)
CVE-2026-56164 — Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability (86/100)
CVE-2026-56155 — Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability (79/100)
CVE-2026-54117 — microsoft sql server 2016: Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a networ… (32/100)
CVE-2026-49164 — microsoft windows 10 1607: Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute cod… (38/100)
CVE-2026-47304 — microsoft .net framework: Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security… (38/100)
CVE-2026-57983 — CVE-2026-57983 — Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a securit… (39/100)
CVE-2026-26145 — microsoft azure synapse: Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network. (38/100)
CVE-2026-41106 — microsoft 365 copilot: Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevat… (36/100)
CVE-2026-45659 — Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability (78/100)