CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-88204
High

Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint due to improper input neutralization during web page generation. Allows an authorized attacker to perform spoofing over a network.

CVE-2026-88203
MediumEPSS 57%

An untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

CVE-2026-88202
HighEPSS 53%

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The issue stems from improper memory handling during document processing.

CVE-2026-88201
Medium

A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-88200
HighEPSS 52%

Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. The issue involves improper security context management.

CVE-2026-88198
HighEPSS 52%

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. The issue stems from improper access permission verification.

CVE-2026-88197
High

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. The issue stems from improper memory management during data processing.

CVE-2026-88196
HighEPSS 53%

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. The issue stems from improper memory management during data processing.

CVE-2026-88195
Medium

A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-88194
High

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. The issue stems from improper memory access.

CVE-2026-88193
High

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally. The issue stems from improper memory management.

CVE-2026-88192
MediumEPSS 57%

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-88191
High

Improper link resolution before file access (link following) in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. The issue stems from improper file path handling.

CVE-2026-88190
MediumEPSS 57%

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-88189
High

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. The issue stems from improper memory access.

CVE-2026-88188
High

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88186
HighEPSS 53%

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-88185
HighEPSS 51%

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-88184
Medium

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-88183
MediumEPSS 57%

An out-of-bounds read vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS