Find the CVE cohort

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:34.689Z. Updated 2026-08-10T15:12:29.481Z.

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) KEV listed. Forecast present in this snapshot.

Published 2025-04-08T17:23:34.083Z. Updated 2026-08-10T15:12:28.880Z.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:33.416Z. Updated 2026-08-10T15:12:28.172Z.

Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:32.887Z. Updated 2026-08-10T15:12:27.592Z.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:32.330Z. Updated 2026-08-10T15:12:27.027Z.

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:31.840Z. Updated 2026-08-10T15:13:25.131Z.

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:31.211Z. Updated 2026-08-10T15:12:26.352Z.

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:29.930Z. Updated 2026-08-10T15:12:25.105Z.

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:29.418Z. Updated 2026-08-10T15:12:24.504Z.

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:28.860Z. Updated 2026-08-10T15:12:23.741Z.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:27.622Z. Updated 2026-08-10T15:12:22.910Z.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:26.839Z. Updated 2026-08-10T15:12:22.438Z.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:26.244Z. Updated 2026-08-10T15:12:21.952Z.

Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:25.628Z. Updated 2026-08-10T15:12:21.248Z.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:25.096Z. Updated 2026-08-10T15:12:20.520Z.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:24.533Z. Updated 2026-08-10T15:12:19.880Z.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:24.019Z. Updated 2026-08-10T15:12:19.318Z.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-04-08T17:23:23.465Z. Updated 2026-08-10T15:12:18.697Z.