CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2026-78506 | 中危5.5 | Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 08/09/2026 |
| CVE-2026-78504 | 高危8.8 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-78503 | 中危6.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 08/09/2026 |
| CVE-2026-78502 | 中危6.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 08/09/2026 |
| CVE-2026-78463 | 高危8.8 | Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-78462 | 高危8.8 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 08/09/2026 |
| CVE-2026-78461 | 高危7.4 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 08/09/2026 |
| CVE-2026-78456 | 高危8.8 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-78442 | 高危8.8 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-78441 | 中危6.5 | Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network. | 08/09/2026 |
| CVE-2026-77911 | 中危6.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 08/09/2026 |
| CVE-2026-77909 | 中危6.5 | Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network. | 08/09/2026 |
| CVE-2026-77908 | 高危8.8 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-77907 | 高危8.8 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-77906 | 高危8.8 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 08/09/2026 |
| CVE-2026-77901 | 高危8.8 | Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 08/09/2026 |