| CVE-2026-119974 | HIGH | 7.0 | Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authoriz… | 2026-11-10 |
| CVE-2026-119975 | HIGH | 8.8 | Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code all… | 2026-11-10 |
| CVE-2026-119976 | MEDIUM | 6.5 | External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows… | 2026-11-10 |
| CVE-2026-119981 | HIGH | 7.0 | Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate pr… | 2026-11-10 |
| CVE-2026-119982 | MEDIUM | 6.5 | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature ove… | 2026-11-10 |
| CVE-2026-119983 | HIGH | 8.8 | Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security … | 2026-11-10 |
| CVE-2026-119985 | HIGH | 8.3 | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-119986 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-119987 | HIGH | 7.8 | Untrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges local… | 2026-11-10 |
| CVE-2026-119988 | HIGH | 7.1 | Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-119989 | HIGH | 8.2 | Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows … | 2026-11-10 |
| CVE-2026-119990 | CRITICAL | 9.8 | Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privil… | 2026-11-10 |
| CVE-2026-119991 | MEDIUM | 5.9 | Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information… | 2026-11-10 |
| CVE-2026-119992 | HIGH | 7.0 | Double free in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119993 | MEDIUM | 6.5 | Access of resource using incompatible type ('type confusion') in Microsoft Office Outlook allows an unauthoriz… | 2026-11-10 |
| CVE-2026-119995 | HIGH | 7.5 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a … | 2026-11-10 |
| CVE-2026-119996 | HIGH | 7.5 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a … | 2026-11-10 |
| CVE-2026-119997 | HIGH | 7.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally… | 2026-11-10 |
| CVE-2026-119998 | MEDIUM | 6.5 | Product ui does not warn user of unsafe actions in Microsoft Office allows an unauthorized attacker to bypass … | 2026-11-10 |
| CVE-2026-119999 | MEDIUM | 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne… | 2026-11-10 |
| CVE-2026-120000 | HIGH | 7.5 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code… | 2026-11-10 |
| CVE-2026-120001 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over… | 2026-11-10 |
| CVE-2026-120002 | CRITICAL | 9.9 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ove… | 2026-11-10 |
| CVE-2026-120003 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-120005 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over… | 2026-11-10 |
| CVE-2026-120006 | HIGH | 7.5 | Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate priv… | 2026-11-10 |
| CVE-2026-120778 | HIGH | 7.3 | Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker… | 2026-11-10 |
| CVE-2026-120779 | CRITICAL | 9.6 | Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacke… | 2026-11-10 |
| CVE-2026-120780 | HIGH | 8.3 | Improper access control in Visual Studio Code allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-120782 | HIGH | 7.8 | Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacke… | 2026-11-10 |
| CVE-2026-120783 | MEDIUM | 6.4 | Weak authentication in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.… | 2026-11-10 |
| CVE-2026-120785 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-120786 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-120788 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-120789 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-120790 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-120791 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-120792 | HIGH | 7.3 | Insertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose info… | 2026-11-10 |
| CVE-2026-120796 | MEDIUM | 5.3 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.… | 2026-11-10 |
| CVE-2026-121660 | HIGH | 7.5 | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a securit… | 2026-11-10 |
| CVE-2026-121661 | HIGH | 7.8 | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a securit… | 2026-11-10 |
| CVE-2026-121662 | HIGH | 8.6 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allo… | 2026-11-10 |
| CVE-2026-121663 | HIGH | 8.8 | Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a securit… | 2026-11-10 |
| CVE-2026-121664 | HIGH | 8.3 | Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code all… | 2026-11-10 |
| CVE-2026-121665 | HIGH | 8.8 | Trust boundary violation in Visual Studio Code allows an unauthorized attacker to bypass a security feature ov… | 2026-11-10 |
| CVE-2026-121668 | HIGH | 7.7 | Missing authorization in Azure Confidential Clean Rooms allows an authorized attacker to perform tampering ove… | 2026-11-10 |
| CVE-2026-121669 | MEDIUM | 6.1 | Insufficiently protected credentials in Microsoft PowerShell Core allows an unauthorized attacker to disclose … | 2026-11-10 |
| CVE-2026-121670 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay… | 2026-11-10 |
| CVE-2026-121671 | HIGH | 7.0 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-121673 | HIGH | 7.8 | Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |