Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-78517 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-78515 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-78514 | high | 8.8 | No | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-78513 | medium | 5.5 | No | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | 2026-09-17 |
| CVE-2026-78511 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-78509 | critical | 9.8 | No | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-78507 | high | 8.8 | No | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-78506 | medium | 5.5 | No | Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 2026-09-17 |
| CVE-2026-78505 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-78504 | high | 8.8 | No | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-78503 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-78502 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-78439 | high | 8.8 | No | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-77901 | high | 8.8 | No | Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-77898 | high | 7.5 | No | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-76869 | high | 7.2 | No | Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboot_timer_set.cgi caused by improper sscanf token parsing. A... | 2026-09-17 |
| CVE-2026-76646 | high | 7.5 | No | A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a d... | 2026-09-17 |
| CVE-2026-76864 | medium | 4.8 | No | NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval() in qos_xianz_add_cgi, qos_xianz_show_cgi, qos_... | 2026-09-17 |
| CVE-2026-76859 | medium | 6.5 | No | Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the user_pass_show.cgi component. Low-privil... | 2026-09-17 |
| CVE-2026-76854 | medium | 6.5 | No | Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7_web_auth_user_show.cgi related to captive... | 2026-09-17 |