157964 matches found
CVE-2026-80073
CVE-2026-80073 is an out-of-bounds read vulnerability in Microsoft Office Outlook that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction but no prior privileges, and results in a HIGH confidentiality impact with no integrity or ava...
CVE-2026-78522
CVE-2026-78522 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interaction (e.g...
CVE-2026-78521
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The attack requires user interaction (e.g., opening a malicious document) but no prior auth...
EUVD-2026-73825
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
EUVD-2026-73826
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-80079
CVE-2026-80079 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized, remote attacker to disclose information over a network. The CVSS 3.1 base score is 6.5 (Medium) (AV:N/AC:L/PR:N/UI:R/C:H). CISA's SSVC assessment indicates no known exploitation , not autom...
CVE-2026-78519
CVE-2026-78519 is a use of uninitialized resource vulnerability in Microsoft Office Outlook that allows an unauthorized, remote attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with low attack complexity and no privileges required, though user interaction is required to...
EUVD-2026-73823
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73824
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-77481
CVE-2026-77481 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges required) to achieve remote code execution over a network . The CVSS 3.1 base score is 8.8 (HIGH) , with high impact to confidentiality, integrity, and availability, and no us...
CVE-2026-67645
CVE-2026-67645 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS 3.1 base score is 6.5 (MEDIUM) , reflecting low complexity, low privileges required, and high confidentiality impact with no integrity or availabili...
EUVD-2026-73822
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67624
CVE-2026-67624 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker (low privileges) to disclose information over a network. The vulnerability is rated CVSS 6.5 (Medium) with no integrity or availability impact. CISA's SSVC assessment indicates no known exploitation...
EUVD-2026-73820
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-78503
CVE-2026-78503 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The assigned CVSS 3.1 base score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interac...
CVE-2026-78514
CVE-2026-78514 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e....
CVE-2026-78512
Microsoft Office Word is affected by a numeric truncation error that allows an unauthorized attacker to achieve remote code execution over a network. Exploitation requires user interaction (e.g., opening a crafted document) but no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) with full impac...
EUVD-2026-73819
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...