| CVE-2026-88206 | ALTO7.5 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-88204 | ALTO7.3 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 13/10/2026 |
| CVE-2026-88200 | ALTO8.8 | Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-88198 | ALTO8.8 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-88166 | ALTO8.8 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 13/10/2026 |
| CVE-2026-88163 | ALTO8.8 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 13/10/2026 |
| CVE-2026-88155 | ALTO8.8 | Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 13/10/2026 |
| CVE-2026-88092 | CRÍTICO9.4 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network. | 13/10/2026 |
| CVE-2026-87696 | ALTO7.5 | Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-87695 | ALTO7.8 | Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. | 13/10/2026 |
| CVE-2026-87692 | ALTO7.8 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. | 13/10/2026 |
| CVE-2026-85932 | MEDIO6.5 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 13/10/2026 |
| CVE-2026-85925 | ALTO8.2 | Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-85922 | ALTO7.4 | Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network. | 13/10/2026 |
| CVE-2026-85900 | ALTO8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 13/10/2026 |
| CVE-2026-85881 | ALTO8.0 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network. | 13/10/2026 |
| CVE-2026-85879 | ALTO7.0 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. | 13/10/2026 |
| CVE-2026-85790 | MEDIO5.9 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. | 13/10/2026 |
| CVE-2026-70298 | MEDIO6.5 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 13/10/2026 |
| CVE-2026-70267 | ALTO7.2 | Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 13/10/2026 |