A use-after-free vulnerability (CWE-416) in the Desktop Window Manager of Windows 10 version 1809 and Windows Server 2019 allows an authorized local user to elevate privileges. An attacker needs a valid low-privileged account or an existing foothold on the system, but then can gain high impact on confidentiality, integrity and availability. The vulnerability is not reachable directly from the internet.
Microsoft · Windows 10 version 1809
A heap-based buffer overflow in Windows Media Player allows an unauthenticated attacker to execute code over the network. The CVSS 3.1 vector (9.8, critical) requires no privileges and no user interaction. Microsoft rates the maximum severity as Important, and no public exploit code is known.
Microsoft · Windows Media Player
Research and translation in progress – available shortly.
Microsoft SharePoint Server Subscription Edition contains an elevation of privilege vulnerability (CWE-269, Improper Privilege Management). An attacker with a low-privileged valid account can reach a higher privilege level, potentially gaining administrative control over the affected server. No user interaction is required, and the attack can be carried out over the network. Exposure is greatest for internet-facing farms and farms with many user accounts.
Microsoft · SharePoint Server
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
The Windows RPC Runtime Library contains an untrusted pointer dereference that allows an unauthorized attacker to execute code. The CNA describes the attack as network-based. The CVSS vector (UI:R) indicates that a user must interact, and the vendor snippet we could access describes a specially crafted file, so exposure depends on how RPC services and user file handling are reachable. Attack conditions are not fully confirmed.
Microsoft · Windows
A security feature bypass vulnerability in Microsoft Office Word relies on untrusted inputs in a security decision (CWE-807). A local, unauthorized attacker may bypass a security feature, for example by getting a user to open a crafted Word document, as the CVSS vector requires user interaction. CVSS 7.8 (High); the vulnerability was published with the October 2026 Microsoft security updates.
Microsoft · 365 Apps
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Microsoft Word in Microsoft 365 Apps and Office LTSC editions contains a heap-based buffer overflow (CWE-122). A remote attacker can execute code on the affected system by getting a user to open or interact with a crafted document, for example one delivered by email or file sharing. The CVSS base score is 8.8, with high impact on confidentiality, integrity and availability.
Microsoft · 365 Apps
Research and translation in progress – available shortly.
An elevation of privilege vulnerability (CWE-270, privilege context switching error) affects Microsoft SharePoint Server Subscription Edition. An attacker with a valid low-privilege account can send a specially crafted request to an affected server and perform operations beyond the permissions of that account. Exploitation requires authentication, and no exploitation or public proof of concept is known at publication.
Microsoft · SharePoint Server Subscription Edition
Missing authorization checks in Microsoft Office SharePoint allow an authenticated attacker with a low-privileged account to perform operations beyond the permissions granted to that account. The attacker needs network access to an affected server and a valid user account, and the vulnerability is rated High (CVSS 3.1 8.8). Internet-facing farms with many user, external or guest accounts are more exposed.
Microsoft · SharePoint Server
A heap-based buffer overflow in Microsoft Office allows remote code execution. Microsoft rates it Important with CVSS 8.8. An attacker must convince a user to open a malicious Office file, typically delivered by email or download. Microsoft reports no known exploitation.
Microsoft · Office
A heap-based buffer overflow in Microsoft Office allows an unauthenticated attacker to execute code over a network, as classified by Microsoft (CWE-122). The CVSS 3.1 base score is 8.8 (High). Exploitation requires user interaction, and the trigger is not confirmed in the sources, so it is unknown whether opening a crafted document or file is the vector.
Microsoft · Office
Research and translation in progress – available shortly.
An out-of-bounds read in the Windows DWM Core Library allows a local user with low privileges to elevate their rights, potentially to SYSTEM. The vulnerability affects Windows 10, Windows 11, Windows Server 2016, 2019, 2022 and 2025 in the builds listed below. An attacker needs an existing local foothold, for example through a phished account, malware or a shared multi-user system.
Microsoft · Windows 10
The Microsoft Scripting Engine component of Windows contains a heap-based buffer overflow (CWE-122), tracked as CVE-2026-88193. An attacker with local, low-privileged access can exploit it to elevate privileges, with high impact on confidentiality, integrity and availability. It is not reachable directly from the internet and requires a foothold on the system, such as a compromised user account or malware.
Microsoft · Windows
