CVE-2026-62870 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-62870

CVE-2026-62870 describes a use-after-free in Microsoft Excel that could allow a remote attacker to execute code over a network. The issue has a high impact (C/H/I/A) with network-based, low-attack-complexity exploitation and requires user interaction. Microsoft has published a security update (KB...

CVE-2026-66326

Technical details (affected products/versions, root cause, and remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-66326 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66326

Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-66326 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66315 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66315 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66315

Technical details about CVE-2026-66315 are not publicly available in the provided documents. Monitor for updates from the vendors and security advisories to obtain affected products, vulnerable components, impact specifics, and remediations.

CVE-2026-66312 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66312

CVE-2026-66312 is a buffer over-read in Microsoft Edge (Chromium-based) that enables an authorized attacker to execute remote code over a network. The vulnerability is referenced across NVD, ENISA Europe and CVE listings, and Microsoft’s vulnerability advisory. Affected product is Edge (Chromium-...

CVE-2026-66312 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66321

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-66321

CVE-2026-66321 affects Microsoft Edge (Chromium-based). The issue is an access of resource using an incompatible type (type confusion) that could allow an unauthenticated, network-based attacker to execute code on the target system. Exploitation details, affected versions, and a mitigation patch/...

CVE-2026-66321 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-18667

A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host...

CVE-2026-18667 Sensor Proxy Version 1.4.2 Fixes One Vulnerability

A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host...

CVE-2026-18667

Affected product: Tenable Sensor Proxy; version: 1.4.2 (the release fixes a vulnerability). Vulnerability and impact: A remote attacker can cause code to execute with elevated privileges by persuading an operator to connect the sensor to an attacker-controlled host. The CVSS metrics indicate high...

CVE-2026-66065

CVE-2026-66065 affects Ouroboros, a local-first runtime for AI coding agents. Before 0.42.1, the denylist was incomplete: multiple execution-routing keys of the same RCE class were omitted, allowing a malicious cloned repo to trigger arbitrary command execution via a .env loaded at import. The pr...

CVE-2026-66065 Ouroboros: Untrusted project .env can still reach RCE via omitted execution-routing keys (Incomplete fix of CVE-2026-47211)

Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. Versions prior to 0.42.1 have an incomplete denylist. Several execution-routing keys of the same RCE class were omitted, so a malicious cloned repo can still...