Filtered by vendor Microsoft Subscriptions
Total 24064 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-34637 3 Adobe, Apple, Microsoft 3 Premiere Pro, Macos, Windows 2026-05-13 7.8 High
Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-34638 3 Adobe, Apple, Microsoft 3 Premiere Pro, Macos, Windows 2026-05-13 7.8 High
Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-40416 1 Microsoft 1 Edge Chromium 2026-05-13 4.3 Medium
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-40364 1 Microsoft 7 365 Apps, Office 2019, Office 2021 and 4 more 2026-05-13 8.4 High
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40363 1 Microsoft 9 365 Apps, Office, Office 2016 and 6 more 2026-05-13 8.4 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-35440 1 Microsoft 5 365 Apps, Office 2019, Office 2021 and 2 more 2026-05-13 5.5 Medium
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-35438 1 Microsoft 1 Windows Admin Center 2026-05-13 8.3 High
Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
CVE-2026-35433 1 Microsoft 1 .net 2026-05-13 7.3 High
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-33117 1 Microsoft 1 Azure Sdk For Java 2026-05-13 9.1 Critical
Improper authentication in Azure SDK allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-40360 1 Microsoft 8 365 Apps, Excel 2016, Office 2019 and 5 more 2026-05-13 7.8 High
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-32177 1 Microsoft 6 .net, .net Framework, Visual Studio 2017 and 3 more 2026-05-13 7.3 High
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-40417 1 Microsoft 7 Dynamics 365 Business Central 2024, Dynamics 365 Business Central 2024 Wave 1, Dynamics 365 Business Central 2024 Wave 2 and 4 more 2026-05-13 7.8 High
Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.
CVE-2026-34350 1 Microsoft 2 Windows Server 2025, Windows Server 2025 (server Core Installation) 2026-05-13 6.5 Medium
Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network.
CVE-2026-35429 1 Microsoft 1 Edge 2026-05-13 4.3 Medium
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-33833 1 Microsoft 1 Azure Machine Learning 2026-05-13 8.2 High
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-42893 1 Microsoft 1 Outlook 2026-05-13 7.4 High
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.
CVE-2026-32204 1 Microsoft 2 Azure Monitor, Azure Monitor Agent 2026-05-13 7.8 High
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2026-40366 1 Microsoft 7 365 Apps, Office 2019, Office 2021 and 4 more 2026-05-13 8.4 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40419 1 Microsoft 4 365 Apps, Office 2019, Office 2021 and 1 more 2026-05-13 7.8 High
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-41102 1 Microsoft 2 Powerpoint, Powerpoint For Android 2026-05-13 7.1 High
Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.