Recently updated CVEs

Oct 27, 2026 UTC

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Oct 27, 2026 UTC

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

Oct 27, 2026 UTC

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.

Oct 27, 2026 UTC

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Oct 27, 2026 UTC

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Oct 27, 2026 UTC

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Oct 27, 2026 UTC

Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

Oct 27, 2026 UTC

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

Oct 27, 2026 UTC

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Oct 27, 2026 UTC

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

Oct 27, 2026 UTC

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.

Oct 27, 2026 UTC

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Oct 27, 2026 UTC

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.

Oct 27, 2026 UTC

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.

Oct 27, 2026 UTC

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.