Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-69797 | high | 8.8 | No | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-69759 | high | 8.8 | No | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-69739 | high | 7.5 | No | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-69734 | medium | 6.5 | No | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-69722 | high | 8.8 | No | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-69719 | medium | 6.5 | No | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-69686 | high | 8.8 | No | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-69678 | high | 8.8 | No | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-69671 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-69632 | high | 8.8 | No | Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-69626 | medium | 6.5 | No | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-67643 | critical | 9.8 | No | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-67636 | critical | 9.0 | No | Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-67631 | critical | 9.8 | No | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-67378 | critical | 9.0 | No | Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-73003 | high | 7.0 | No | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. | 2026-09-17 |
| CVE-2026-73005 | high | 7.0 | No | Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. | 2026-09-17 |
| CVE-2026-73010 | critical | 9.8 | No | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-79419 | high | 8.7 | No | A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is... | 2026-09-17 |
| CVE-2026-79418 | high | 8.7 | No | EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper n... | 2026-09-17 |