Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-70269 | high | 8.1 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70268 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70263 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 2026-10-15 |
| CVE-2026-70254 | high | 8.8 | No | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70220 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 2026-10-15 |
| CVE-2026-70215 | high | 8.8 | No | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70206 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 2026-10-15 |
| CVE-2026-55840 | medium | 5.4 | No | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/u... | 2026-10-15 |
| CVE-2026-45165 | not reported | — | No | An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on... | 2026-10-15 |
| CVE-2026-110364 | medium | 5.3 | No | Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measuremen... | 2026-10-15 |
| CVE-2026-110361 | medium | 6.5 | No | Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-uploads allows Retrieve Embedded Sensiti... | 2026-10-15 |
| CVE-2026-108499 | medium | 5.3 | No | Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured Access Control Secur... | 2026-10-15 |
| CVE-2026-105718 | high | 8.8 | No | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-105715 | high | 7.5 | No | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-105599 | high | 7.5 | No | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-104198 | medium | 5.3 | No | ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mish... | 2026-10-15 |
| CVE-2026-102858 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-100212 | high | 8.8 | No | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-100211 | high | 8.8 | No | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-100210 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |