| | CVE-2026-64916 | Microsoft | medium | 4.6 | 0.3%
| | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of… | Aug 11, 2026 | Aug 13, 2026 |
| | CVE-2026-64915 | Microsoft | high | 7.8 | 0.3%
| | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code … | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-64914 | Microsoft | high | 7.8 | 0.4%
| | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-64912 | Microsoft | high | 7.8 | 0.3%
| | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute co… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-64911 | Microsoft | high | 7.8 | 0.3%
| | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-64910 | Microsoft | high | 7.8 | 0.3%
| | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-64909 | Microsoft | high | 7.8 | 0.3%
| | Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execut… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-64908 | Microsoft | high | 7.8 | 0.3%
| | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-64907 | Microsoft | high | 7.8 | 0.3%
| | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-64906 | Microsoft | high | 7.8 | 0.3%
| | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-64905 | Microsoft | high | 7.8 | 0.3%
| | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-64904 | Microsoft | high | 7.8 | 0.3%
| | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-64903 | Microsoft | high | 7.8 | 0.3%
| | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l… | Aug 11, 2026 | Aug 13, 2026 |
| | CVE-2026-64902 | Microsoft | medium | 4.6 | — | | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of… | Aug 11, 2026 | Aug 11, 2026 |
| | CVE-2026-64901 | Microsoft | high | 8.8 | — | | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex… | Aug 11, 2026 | Aug 12, 2026 |
| | CVE-2026-64900 | Microsoft | high | 7.3 | 0.4%
| | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of… | Aug 11, 2026 | Aug 19, 2026 |
| | CVE-2026-64899 | Microsoft | medium | 5.5 | 0.3%
| | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-64898 | Microsoft | high | 7.8 | 0.3%
| | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local… | Aug 11, 2026 | Aug 13, 2026 |
| | CVE-2026-64897 | Microsoft | medium | 4.6 | — | | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of… | Aug 11, 2026 | Aug 11, 2026 |
| | CVE-2026-63533 | Microsoft | high | 7.8 | 0.3%
| | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-63532 | Microsoft | high | 7.8 | 0.3%
| | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code l… | Aug 11, 2026 | Aug 13, 2026 |
| | CVE-2026-63531 | Microsoft | medium | 5.5 | 0.4%
| | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information … | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-63530 | Microsoft | medium | 5.5 | 0.5%
| | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information … | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-63529 | Microsoft | medium | 5.5 | 0.4%
| | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-63528 | Microsoft | medium | 5.5 | 0.3%
| | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information … | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-63527 | Microsoft | high | 7.8 | 0.3%
| | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code… | Aug 11, 2026 | Aug 13, 2026 |
| | CVE-2026-63526 | Microsoft | high | 7.8 | 0.3%
| | Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code loca… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-63525 | Microsoft | high | 7.8 | 0.4%
| | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code lo… | Aug 11, 2026 | Aug 13, 2026 |
| | CVE-2026-63524 | Microsoft | medium | 5.5 | 0.4%
| | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-63522 | Microsoft | high | 7.8 | 0.3%
| | Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized att… | Aug 11, 2026 | Aug 17, 2026 |
| | CVE-2026-63521 | Microsoft | medium | 5.5 | 0.3%
| | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information … | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-63520 | Microsoft | high | 8.1 | 1.1%
| | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute … | Aug 11, 2026 | Aug 13, 2026 |
| | CVE-2026-63519 | Microsoft | high | 7.8 | 0.4%
| | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local… | Aug 11, 2026 | Aug 13, 2026 |
| | CVE-2026-63518 | Microsoft | high | 7.8 | 0.4%
| | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code … | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-63517 | Microsoft | medium | 5.5 | 0.4%
| | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local… | Aug 11, 2026 | Aug 13, 2026 |
| | CVE-2026-63516 | Microsoft | medium | 6.5 | 1.2%
| | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to pe… | Aug 11, 2026 | Aug 12, 2026 |
| | CVE-2026-63515 | Microsoft | high | 7.8 | 0.4%
| | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-63514 | Microsoft | high | 8.8 | 1.3%
| | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex… | Aug 11, 2026 | Aug 12, 2026 |
| | CVE-2026-63513 | Microsoft | high | 7.8 | 0.4%
| | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-63512 | Microsoft | medium | 6.5 | 0.5%
| | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tamp… | Aug 11, 2026 | Aug 12, 2026 |
| | CVE-2026-62917 | Microsoft | medium | 4.6 | 0.4%
| | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform sp… | Aug 11, 2026 | Aug 13, 2026 |
| | CVE-2026-62915 | Microsoft | medium | 6.5 | 0.5%
| | Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a securit… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-62914 | Microsoft | high | 7.3 | 0.5%
| | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex… | Aug 11, 2026 | Aug 13, 2026 |
| | CVE-2026-62913 | Microsoft | high | 8.8 | 0.6%
| | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute cod… | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-62912 | Microsoft | medium | 6.5 | 1.3%
| | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny… | Aug 11, 2026 | Aug 13, 2026 |
| | CVE-2026-62911 | Microsoft | high | 8.0 | 1.2%
| | Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker t… | Aug 11, 2026 | Sep 2, 2026 |
| | CVE-2026-62910 | Microsoft | high | 7.2 | 0.7%
| | Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows … | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-62909 | Microsoft | high | 7.8 | 0.3%
| | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-62902 | Microsoft | medium | 6.5 | 0.8%
| | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to … | Aug 11, 2026 | Aug 14, 2026 |
| | CVE-2026-62901 | Microsoft | high | 7.5 | 1.1%
| | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a ne… | Aug 11, 2026 | Aug 14, 2026 |