Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+4 produktów) | CVE-2026-97738 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
8,8 | 0,86 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+3 produktów) | CVE-2026-96997 Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally. |
7,8 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+3 produktów) | CVE-2026-97001 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
7,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+4 produktów) | CVE-2026-97003 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
8,8 | 0,76 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+4 produktów) | CVE-2026-97004 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
8,8 | 0,86 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+3 produktów) | CVE-2026-97005 Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
5,5 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+4 produktów) | CVE-2026-97007 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
8,8 | 0,86 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+4 produktów) | CVE-2026-97008 Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
8,8 | 0,86 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office LTSC 2021 / Microsoft Office LTSC 2024 | CVE-2026-97009 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
7,8 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-96953 Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
7,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| .NET 10.0 runtime / .NET 11.0 runtime / Microsoft Visual Studio 2022 version 17.14 (+1 produktów) | CVE-2026-96957 Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. |
8,8 | 0,59 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft .NET Framework 3.5 / Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 / Microsoft .NET Framework 3.5 AND 4.7.2 (+6 produktów) | CVE-2026-96958 Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
7,5 | 1,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft .NET Framework 3.5 / Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 / Microsoft .NET Framework 3.5 AND 4.7.2 (+6 produktów) | CVE-2026-96959 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
7,5 | 0,97 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft .NET Framework 3.5 / Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 / Microsoft .NET Framework 3.5 AND 4.7.2 (+6 produktów) | CVE-2026-96960 Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. |
7,5 | 1,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office 365 for Mac / Microsoft Office LTSC 2021 (+3 produktów) | CVE-2026-96995 Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. |
7,8 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft 365 Apps for Enterprise / Microsoft Office LTSC 2021 / Microsoft Office LTSC 2024 | CVE-2026-96996 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
7,8 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-96947 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
7,8 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-96948 Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. |
5,5 | 0,52 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-96949 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
7,0 | 0,21 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-96950 Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
7,8 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft Edge (Chromium-based) / Outlook.com / Windows 10 Version 1607 (+17 produktów) | Microsoft Windows Command Injection Vulnerability Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network. |
8,8 | 9,81 % | Tak | |
| Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 (+10 produktów) | CVE-2026-96952 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
8,8 | 0,9 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 10 Version 1607 / Windows 10 Version 1809 / Windows 10 Version 21H2 (+17 produktów) | CVE-2026-96938 Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. |
6,7 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| Windows 11 version 23H2 / Windows 11 Version 24H2 / Windows 11 Version 25H2 (+4 produktów) | CVE-2026-96939 Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
7,0 | 0,23 % | Brak wpisu w KEV nie wyklucza ataków | |
| Raw Image Extension | CVE-2026-96943 Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. |
8,8 | 0,6 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.