CVE-2026-81385

Microsoft Office Publisher is affected by a deserialization of untrusted data vulnerability that allows an unauthorized, remote attacker to achieve remote code execution over a network with low complexity and no required privileges, though user interaction is required. The CVSS 3.1 score is 8.8 (...

EUVD-2026-73851

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-81383

Visual Studio Code is affected by an information disclosure vulnerability caused by the use of an incorrectly-resolved name or reference . An unauthorized network-based attacker can disclose information, with high confidentiality impact and changed scope (affecting other components). The attack r...

CVE-2026-81352

A heap-based buffer overflow exists in the Microsoft Windows Codecs Library , specifically affecting Web Media Extensions . This vulnerability allows an unauthorized attacker to execute arbitrary code over a network. Exploitation of this flaw could result in remote code execution . Documentation ...

EUVD-2026-73848

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...

EUVD-2026-73846

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...

CVE-2026-80096

CVE-2026-80096 is an out-of-bounds read vulnerability in Windows Remote Desktop Services that allows an authorized attacker to elevate privileges over a network. Microsoft rated it CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw req...

CVE-2026-80082

CVE-2026-80082 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating network attack vector, low complexity, no priv...

EUVD-2026-73847

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-80081

CVE-2026-80081 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interacti...

EUVD-2026-73845

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

EUVD-2026-73844

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73843

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...

CVE-2026-80090

CVE-2026-80090 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network. The attack requires user interaction (e.g., opening a crafted document) but needs no prior privileges , yielding a CVSS 3.1 score of 6.5 (MED...

CVE-2026-80089

CVE-2026-80089 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a network vector, low attack complexity, no privileges required, and user interaction required, resultin...

EUVD-2026-73842

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73841

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-80088

CVE-2026-80088 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating that while user interaction is required...

CVE-2026-80091

Microsoft Office is affected by an information disclosure vulnerability caused by the use of an uninitialized resource . An unauthorized attacker can leverage this over a network to disclose information, though user interaction is required (CVSS: 6.5 MEDIUM , vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:...

CVE-2026-80085

CVE-2026-80085 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a crafted document) but no prior authentication, yielding high impact to confidentialit...