Aggregating NVD, CVE, and multi-source threat feeds, this list provides deep analysis of high-risk threats such as RCE. By integrating CVSS and EPSS models, the system dynamically tracks Exp (Exploit) resources and PoC availability to accurately assess Exploitability. Combined with official Patches and remediation strategies, it helps prioritize Vulnerability Management workflows, significantly shortening response cycles and securing your critical assets.
Assigner (CNA / source)：[email protected] Remove this filter
| CVE | Description | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|
| CVE-2026-45461 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 8.4 | 0.36% | 2026-06-09 | 2026-07-08 |
| CVE-2026-45460 | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 4.7 | 0.36% | 2026-06-09 | 2026-07-08 |
| CVE-2026-45458 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 8.4 | 0.44% | 2026-06-09 | 2026-07-08 |
| CVE-2026-45457 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 7.8 | 0.37% | 2026-06-09 | 2026-07-08 |
| CVE-2026-45455 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 3.3 | 0.63% | 2026-06-09 | 2026-07-08 |
| CVE-2026-45453 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 5.4 | 0.51% | 2026-06-09 | 2026-07-08 |
| CVE-2026-44823 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 7.8 | 0.37% | 2026-06-09 | 2026-07-08 |
| CVE-2026-44820 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 7.8 | 0.37% | 2026-06-09 | 2026-07-08 |
| CVE-2026-44818 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 7.0 | 0.26% | 2026-06-09 | 2026-07-08 |
| CVE-2026-44817 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 7.8 | 0.37% | 2026-06-09 | 2026-07-08 |
| CVE-2026-44811 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.8 | 0.27% | 2026-06-09 | 2026-07-08 |
| CVE-2026-44808 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 7.8 | 0.27% | 2026-06-09 | 2026-07-08 |
| CVE-2026-44801 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 7.5 | 0.46% | 2026-06-09 | 2026-07-08 |
| CVE-2026-42985 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 8.8 | 0.98% | 2026-06-09 | 2026-07-08 |
| CVE-2026-42974 | Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. | 8.1 | 0.64% | 2026-06-09 | 2026-07-08 |
| CVE-2026-42973 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. | 5.5 | 0.40% | 2026-06-09 | 2026-07-08 |
| CVE-2026-42971 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. | 5.5 | 0.46% | 2026-06-09 | 2026-07-08 |
| CVE-2026-42970 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. | 5.5 | 0.40% | 2026-06-09 | 2026-07-08 |
| CVE-2026-42916 | Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally. | 7.8 | 0.30% | 2026-06-09 | 2026-07-08 |
| CVE-2026-42914 | Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network. | 5.3 | 0.79% | 2026-06-09 | 2026-07-08 |