Search Results (38741 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-53737 1 Microsoft 11 365, 365 Apps, Excel and 8 more 2025-09-09 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-53736 1 Microsoft 15 365, 365 Apps, Office and 12 more 2025-09-09 6.8 Medium
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2025-53732 1 Microsoft 1 Office 2025-09-09 7.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-53723 2 Microsoft, Windows 20 Windows, Windows 10, Windows 10 1507 and 17 more 2025-09-09 7.8 High
Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-53720 1 Microsoft 14 Server, Windows, Windows 2008 and 11 more 2025-09-09 8 High
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVE-2025-53155 1 Microsoft 22 Server, Windows, Windows 10 and 19 more 2025-09-09 7.8 High
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2025-53149 1 Microsoft 19 Windows 10, Windows 10 1507, Windows 10 1607 and 16 more 2025-09-09 7.8 High
Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-53131 1 Microsoft 16 Server, Windows, Windows 10 and 13 more 2025-09-09 8.8 High
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVE-2025-50176 1 Microsoft 11 Directx, Server, Windows and 8 more 2025-09-09 7.8 High
Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally.
CVE-2025-50173 1 Microsoft 19 Windows, Windows 10 1507, Windows 10 1607 and 16 more 2025-09-09 7.8 High
Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2025-50168 1 Microsoft 11 Server, Windows, Windows 11 and 8 more 2025-09-09 7.8 High
Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2025-50166 1 Microsoft 18 Distributed Transaction Coordinator, Windows 10 1507, Windows 10 1607 and 15 more 2025-09-09 6.5 Medium
Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose information over a network.
CVE-2025-50164 1 Microsoft 14 Server, Windows, Windows 2008 and 11 more 2025-09-09 8 High
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVE-2025-50163 1 Microsoft 10 Windows Server, Windows Server 2008, Windows Server 2008 R2 and 7 more 2025-09-09 8.8 High
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-50162 1 Microsoft 14 Server, Windows, Windows 2008 and 11 more 2025-09-09 8 High
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVE-2025-50161 1 Microsoft 19 Windows, Windows 10 1507, Windows 10 1607 and 16 more 2025-09-09 7.3 High
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2025-50160 1 Microsoft 9 Windows Server 2008, Windows Server 2008 R2, Windows Server 2012 and 6 more 2025-09-09 8 High
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
CVE-2025-49757 1 Microsoft 14 Server, Windows, Windows 2008 and 11 more 2025-09-09 8.8 High
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-25007 1 Microsoft 1 Exchange Server 2025-09-09 5.3 Medium
Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-25006 1 Microsoft 1 Exchange Server 2025-09-09 5.3 Medium
Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.