CVE-20XX-?
agent?

Code execution CVEs.

Published CVEs classified as code execution, ranked by exploit odds.

7 CVEs · updated 2026-11-10 21:30 UTC

Reset all
  1. CVE-2026-123390

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Code execution Server

    8.8 HIGH No fix listed
  2. CVE-2026-120000

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Code execution Server

    7.5 HIGH No fix listed
  3. CVE-2026-110044

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Code execution Server

    8.8 HIGH No fix listed
  4. CVE-2026-109472

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Code execution Server

    8.8 HIGH No fix listed
  5. CVE-2026-109464

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Code execution Server

    8.8 HIGH No fix listed
  6. CVE-2026-76964

    SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.

    Code execution Server

    10.0 CRITICAL No fix listed
  7. CVE-2026-76965

    SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful exploitation could impact resources beyond the vulnerable component, resulting in a high impact on confidentiality, integrity and availability of the system.

    Code execution Server

    9.9 CRITICAL No fix listed

A list of CVEs whose flaw type is code execution, sorted by how likely they are to be exploited (EPSS). Classification uses the CWE weakness id where present, and a small local model otherwise.