| CVE-2026-77897 | 高7.0 | Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally. | 08/09/2026 |
| CVE-2026-77488 | 中5.5 | Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally. | 08/09/2026 |
| CVE-2026-77487 | 高8.8 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | 08/09/2026 |
| CVE-2026-77486 | 高8.8 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-77485 | 高7.0 | Use after free in SQL Server allows an authorized attacker to elevate privileges locally. | 08/09/2026 |
| CVE-2026-77484 | 高8.8 | Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-77483 | 高8.8 | Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network. | 08/09/2026 |
| CVE-2026-77482 | 高8.8 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-77481 | 高8.8 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-77480 | 高8.8 | Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. | 08/09/2026 |
| CVE-2026-73029 | 中6.5 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. | 08/09/2026 |
| CVE-2026-73028 | 高8.8 | Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network. | 08/09/2026 |
| CVE-2026-72977 | 中6.5 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | 08/09/2026 |
| CVE-2026-72976 | 中5.0 | Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally. | 08/09/2026 |
| CVE-2026-72975 | 中6.5 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | 08/09/2026 |
| CVE-2026-72973 | 高8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-72972 | 高8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-71328 | 高8.8 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-70351 | 高8.8 | Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-70334 | 高7.8 | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. | 08/09/2026 |