| CVE-2026-122985 | MEDIUM | 6.1 | Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker … | 2026-11-10 |
| CVE-2026-122986 | HIGH | 7.8 | Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate p… | 2026-11-10 |
| CVE-2026-122987 | MEDIUM | 5.9 | Missing authentication for critical function in Microsoft High Performance Computing (HPC) Pack allows an unau… | 2026-11-10 |
| CVE-2026-122988 | HIGH | 8.0 | Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a netw… | 2026-11-10 |
| CVE-2026-123375 | HIGH | 8.8 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a… | 2026-11-10 |
| CVE-2026-123376 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a … | 2026-11-10 |
| CVE-2026-123377 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a … | 2026-11-10 |
| CVE-2026-123378 | HIGH | 7.5 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code ove… | 2026-11-10 |
| CVE-2026-123379 | HIGH | 7.5 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a … | 2026-11-10 |
| CVE-2026-123380 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a … | 2026-11-10 |
| CVE-2026-123381 | HIGH | 8.8 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a… | 2026-11-10 |
| CVE-2026-123382 | HIGH | 8.8 | Untrusted pointer dereference in Microsoft Office Outlook allows an unauthorized attacker to execute code over… | 2026-11-10 |
| CVE-2026-123383 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a … | 2026-11-10 |
| CVE-2026-123384 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a … | 2026-11-10 |
| CVE-2026-123385 | HIGH | 8.8 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a n… | 2026-11-10 |
| CVE-2026-123387 | HIGH | 8.0 | Improper neutralization of special elements used in a command ('command injection') in Windows Active Director… | 2026-11-10 |
| CVE-2026-123388 | HIGH | 7.8 | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to… | 2026-11-10 |
| CVE-2026-123389 | HIGH | 7.0 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elev… | 2026-11-10 |
| CVE-2026-123390 | HIGH | 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code… | 2026-11-10 |
| CVE-2026-123391 | HIGH | 8.8 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ove… | 2026-11-10 |
| CVE-2026-123394 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net… | 2026-11-10 |
| CVE-2026-123395 | MEDIUM | 5.9 | Improper control of generation of code ('code injection') in Microsoft Office Excel allows an authorized attac… | 2026-11-10 |
| CVE-2026-124170 | HIGH | 7.5 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-124174 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-124176 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a ne… | 2026-11-10 |
| CVE-2026-124178 | MEDIUM | 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne… | 2026-11-10 |
| CVE-2026-124179 | MEDIUM | 6.5 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a ne… | 2026-11-10 |
| CVE-2026-124183 | MEDIUM | 6.5 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a netw… | 2026-11-10 |
| CVE-2026-124185 | HIGH | 7.5 | Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a … | 2026-11-10 |
| CVE-2026-124187 | HIGH | 8.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-124194 | MEDIUM | 6.5 | Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to… | 2026-11-10 |
| CVE-2026-124210 | MEDIUM | 6.5 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose in… | 2026-11-10 |
| CVE-2026-124224 | HIGH | 7.0 | Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized atta… | 2026-11-10 |
| CVE-2026-124225 | HIGH | 7.8 | Improper control of generation of code ('code injection') in Windows PowerShell allows an unauthorized attacke… | 2026-11-10 |
| CVE-2026-124226 | HIGH | 8.8 | Execution with unnecessary privileges in Windows PowerShell allows an authorized attacker to bypass a security… | 2026-11-10 |
| CVE-2026-124227 | HIGH | 7.5 | Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over… | 2026-11-10 |
| CVE-2026-124228 | HIGH | 8.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook all… | 2026-11-10 |
| CVE-2026-124229 | MEDIUM | 6.6 | Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code wi… | 2026-11-10 |
| CVE-2026-124233 | MEDIUM | 6.5 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a netwo… | 2026-11-10 |
| CVE-2026-125134 | HIGH | 7.5 | Use after free in Windows Function Discovery Resource Publication allows an unauthorized attacker to execute c… | 2026-11-10 |
| CVE-2026-125135 | MEDIUM | 6.8 | Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical… | 2026-11-10 |
| CVE-2026-125136 | HIGH | 8.8 | Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized atta… | 2026-11-10 |
| CVE-2026-125137 | HIGH | 7.8 | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges loca… | 2026-11-10 |
| CVE-2026-125327 | HIGH | 7.5 | pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. … | 2026-11-10 |
| CVE-2026-125328 | MEDIUM | 5.8 | pgEdge Go LLM Library provides a unified Go interface for multiple LLM providers with streaming, tool calling,… | 2026-11-10 |
| CVE-2026-125329 | NA | N/A | Kaneo is a project management application with boards, Gantt charts, and GitHub integration that can be self-h… | 2026-11-10 |
| CVE-2026-125330 | HIGH | 7.5 | HarnessRouter is a self-hosted unified API for agent harnesses. From version 0.4.2 until 0.31.7, routes that a… | 2026-11-10 |
| CVE-2026-125331 | CRITICAL | 9.1 | HarnessRouter is a self-hosted unified API for running agent harnesses with sessions, streaming, files, cancel… | 2026-11-10 |
| CVE-2026-125332 | MEDIUM | 5.9 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to … | 2026-11-10 |
| CVE-2026-125333 | MEDIUM | 5.9 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. From 0.1.… | 2026-11-10 |