{"generated_at":"2026-10-23T14:49:27.043Z","count":16,"incidents":[{"id":"microsoft-sharepoint-server-deserialization-of-untrusted-cve-2026-45659","url":"https://pwned.coffee/i/microsoft-sharepoint-server-deserialization-of-untrusted-cve-2026-45659","title":"Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","summary":"Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network. Added to CISA KEV on 2026-07-01 (federal deadline 2026-07-04).","severity":"critical","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft SharePoint Server","fixed_versions":[],"ids":["CVE-2026-45659"],"stack":["office"],"first_seen":"2026-07-01T12:00:00.000Z","updated_at":"2026-07-01T12:00:00.000Z"},{"id":"check-point-security-gateway-improper-authentication-vul-cve-2026-50751","url":"https://pwned.coffee/i/check-point-security-gateway-improper-authentication-vul-cve-2026-50751","title":"Check Point Security Gateway Improper Authentication Vulnerability","summary":"Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password. Added to CISA KEV on 2026-06-08 (federal deadline 2026-06-11).","severity":"critical","patch_status":"patched","status":"past","exploited":true,"affected":"Check Point Security Gateway","fixed_versions":[],"ids":["CVE-2026-50751"],"stack":["office","vpn-edge"],"first_seen":"2026-06-08T12:00:00.000Z","updated_at":"2026-06-08T12:00:00.000Z"},{"id":"microsoft-exchange-server-deserialization-of-untrusted-d-cve-2023-21529","url":"https://pwned.coffee/i/microsoft-exchange-server-deserialization-of-untrusted-d-cve-2023-21529","title":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","summary":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. Added to CISA KEV on 2026-04-13 (federal deadline 2026-04-27).","severity":"critical","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Exchange Server","fixed_versions":[],"ids":["CVE-2023-21529"],"stack":["office"],"first_seen":"2026-04-13T12:00:00.000Z","updated_at":"2026-04-13T12:00:00.000Z"},{"id":"microsoft-sharepoint-code-injection-vulnerability-cve-2026-65660","url":"https://pwned.coffee/i/microsoft-sharepoint-code-injection-vulnerability-cve-2026-65660","title":"Microsoft SharePoint Code Injection Vulnerability","summary":"Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network. Added to CISA KEV on 2026-09-25 (federal deadline 2026-09-28).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft SharePoint","fixed_versions":[],"ids":["CVE-2026-65660"],"stack":["office"],"first_seen":"2026-09-25T12:00:00.000Z","updated_at":"2026-09-25T12:00:00.000Z"},{"id":"microsoft-internet-key-exchange-ike-service-extensions-d-cve-2026-33824","url":"https://pwned.coffee/i/microsoft-internet-key-exchange-ike-service-extensions-d-cve-2026-33824","title":"Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability","summary":"Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution. Added to CISA KEV on 2026-08-18 (federal deadline 2026-08-21).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Internet Key Exchange (IKE) Service Extensions","fixed_versions":[],"ids":["CVE-2026-33824"],"stack":["office"],"first_seen":"2026-08-18T12:00:00.000Z","updated_at":"2026-08-18T12:00:00.000Z"},{"id":"microsoft-sharepoint-weak-authentication-vulnerability-cve-2026-55040","url":"https://pwned.coffee/i/microsoft-sharepoint-weak-authentication-vulnerability-cve-2026-55040","title":"Microsoft SharePoint Weak Authentication Vulnerability","summary":"Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network. Added to CISA KEV on 2026-08-18 (federal deadline 2026-08-21).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft SharePoint","fixed_versions":[],"ids":["CVE-2026-55040"],"stack":["office"],"first_seen":"2026-08-18T12:00:00.000Z","updated_at":"2026-08-18T12:00:00.000Z"},{"id":"microsoft-sharepoint-deserialization-of-untrusted-data-v-cve-2026-50522","url":"https://pwned.coffee/i/microsoft-sharepoint-deserialization-of-untrusted-data-v-cve-2026-50522","title":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","summary":"Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network. Added to CISA KEV on 2026-07-22 (federal deadline 2026-07-25).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft SharePoint","fixed_versions":[],"ids":["CVE-2026-50522"],"stack":["office"],"first_seen":"2026-07-22T12:00:00.000Z","updated_at":"2026-07-22T12:00:00.000Z"},{"id":"microsoft-sharepoint-deserialization-of-untrusted-data-v-cve-2026-58644","url":"https://pwned.coffee/i/microsoft-sharepoint-deserialization-of-untrusted-data-v-cve-2026-58644","title":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","summary":"Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. Added to CISA KEV on 2026-07-16 (federal deadline 2026-07-19).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft SharePoint","fixed_versions":[],"ids":["CVE-2026-58644"],"stack":["office"],"first_seen":"2026-07-16T12:00:00.000Z","updated_at":"2026-07-16T12:00:00.000Z"},{"id":"microsoft-sharepoint-server-missing-authentication-for-c-cve-2026-56164","url":"https://pwned.coffee/i/microsoft-sharepoint-server-missing-authentication-for-c-cve-2026-56164","title":"Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","summary":"Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network. Added to CISA KEV on 2026-07-14 (federal deadline 2026-07-17).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft SharePoint Server","fixed_versions":[],"ids":["CVE-2026-56164"],"stack":["office"],"first_seen":"2026-07-14T12:00:00.000Z","updated_at":"2026-07-14T12:00:00.000Z"},{"id":"microsoft-exchange-server-cross-site-scripting-vulnerabi-cve-2026-42897","url":"https://pwned.coffee/i/microsoft-exchange-server-cross-site-scripting-vulnerabi-cve-2026-42897","title":"Microsoft Exchange Server Cross-Site Scripting Vulnerability","summary":"Microsoft Exchange Server contains a cross-site scripting vulnerability during web page generation in Outlook Web Access and when certain interaction conditions are met, arbitrary JavaScript can be executed in the browser context. Added to CISA KEV on 2026-05-15 (federal deadline 2026-05-29).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Microsoft","fixed_versions":[],"ids":["CVE-2026-42897"],"stack":["office"],"first_seen":"2026-05-15T12:00:00.000Z","updated_at":"2026-05-15T12:00:00.000Z"},{"id":"microsoft-office-remote-code-execution-cve-2009-0238","url":"https://pwned.coffee/i/microsoft-office-remote-code-execution-cve-2009-0238","title":"Microsoft Office Remote Code Execution","summary":"Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file that includes a malformed object. Added to CISA KEV on 2026-04-14 (federal deadline 2026-04-28).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Office","fixed_versions":[],"ids":["CVE-2009-0238"],"stack":["office"],"first_seen":"2026-04-14T12:00:00.000Z","updated_at":"2026-04-14T12:00:00.000Z"},{"id":"microsoft-sharepoint-server-improper-input-validation-vu-cve-2026-32201","url":"https://pwned.coffee/i/microsoft-sharepoint-server-improper-input-validation-vu-cve-2026-32201","title":"Microsoft SharePoint Server Improper Input Validation Vulnerability","summary":"Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network. Added to CISA KEV on 2026-04-14 (federal deadline 2026-04-28).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft SharePoint Server","fixed_versions":[],"ids":["CVE-2026-32201"],"stack":["office"],"first_seen":"2026-04-14T12:00:00.000Z","updated_at":"2026-04-14T12:00:00.000Z"},{"id":"microsoft-sharepoint-deserialization-of-untrusted-data-v-cve-2026-20963","url":"https://pwned.coffee/i/microsoft-sharepoint-deserialization-of-untrusted-data-v-cve-2026-20963","title":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","summary":"Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. Added to CISA KEV on 2026-03-18 (federal deadline 2026-03-21).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft SharePoint","fixed_versions":[],"ids":["CVE-2026-20963"],"stack":["office"],"first_seen":"2026-03-18T12:00:00.000Z","updated_at":"2026-03-18T12:00:00.000Z"},{"id":"microsoft-office-word-reliance-on-untrusted-inputs-in-a-cve-2026-21514","url":"https://pwned.coffee/i/microsoft-office-word-reliance-on-untrusted-inputs-in-a-cve-2026-21514","title":"Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability","summary":"Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally. Added to CISA KEV on 2026-02-10 (federal deadline 2026-03-03).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Office","fixed_versions":[],"ids":["CVE-2026-21514"],"stack":["office"],"first_seen":"2026-02-10T12:00:00.000Z","updated_at":"2026-02-10T12:00:00.000Z"},{"id":"microsoft-office-security-feature-bypass-vulnerability-cve-2026-21509","url":"https://pwned.coffee/i/microsoft-office-security-feature-bypass-vulnerability-cve-2026-21509","title":"Microsoft Office Security Feature Bypass Vulnerability","summary":"Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft Office could allow an unauthorized attacker to bypass a security feature locally. Some of the impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. Added to CISA KEV on 2026-01-26 (federal deadline 2026-02-16).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Office","fixed_versions":[],"ids":["CVE-2026-21509"],"stack":["office"],"first_seen":"2026-01-26T12:00:00.000Z","updated_at":"2026-01-26T12:00:00.000Z"},{"id":"microsoft-office-powerpoint-code-injection-vulnerability-cve-2009-0556","url":"https://pwned.coffee/i/microsoft-office-powerpoint-code-injection-vulnerability-cve-2009-0556","title":"Microsoft Office PowerPoint Code Injection Vulnerability","summary":"Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption. Added to CISA KEV on 2026-01-07 (federal deadline 2026-01-28).","severity":"high","patch_status":"patched","status":"past","exploited":true,"affected":"Microsoft Office","fixed_versions":[],"ids":["CVE-2009-0556"],"stack":["office"],"first_seen":"2026-01-07T12:00:00.000Z","updated_at":"2026-01-07T12:00:00.000Z"}]}