Security Risk Severity
High Security Risks — Page 8
Published vulnerability pages grouped by high severity. Use this page to review risks that need similar prioritization.
872 published high risks
High severity
Showing 253–288 of 872 published risks.
CVE-2026-55043 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55044 365 apps vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55045 365 apps vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55049 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55052 sharepoint server vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Updated Jul 17, 2026
CVE-2026-55055 365 apps vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55056 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55123 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55125 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55126 sharepoint server vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Updated Jul 17, 2026
CVE-2026-55127 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55128 365 apps vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55129 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55132 365 apps vulnerability
Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55133 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55134 365 apps vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-55140 365 apps vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-56643 windows 10 1607 vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-56644 windows 10 1607 vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-57101 visual studio code vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Updated Jul 17, 2026
CVE-2026-57102 visual studio code vulnerability
Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Updated Jul 17, 2026
CVE-2026-58529 windows 11 26h1 vulnerability
Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network.
Updated Jul 17, 2026
CVE-2026-58532 windows 10 1607 vulnerability
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-58538 windows 10 1809 vulnerability
Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-58540 windows 10 1607 vulnerability
Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-58541 windows 10 1607 vulnerability
Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-58542 windows 11 24h2 vulnerability
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-58544 windows 11 24h2 vulnerability
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-58594 windows 10 1607 vulnerability
Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.
Updated Jul 17, 2026
CVE-2026-58613 windows 10 1809 vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-58617 365 copilot vulnerability
Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.
Updated Jul 17, 2026
CVE-2026-58619 windows 10 1607 vulnerability
Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-58626 windows 10 21h2 vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
Updated Jul 17, 2026
CVE-2026-58627 windows 10 1607 vulnerability
Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Updated Jul 17, 2026
CVE-2026-58628 windows 10 1809 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-58629 windows 10 1607 vulnerability
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026