CVE-2026-41101 Microsoft Word for Android Spoofing Vulnerability

...

CVE-2026-41101

Technical details about CVE-2026-41101 are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected products, versions, root cause, or remediation are included in the supplied material.

CVE-2026-41101 Microsoft Word for Android Spoofing Vulnerability

...

CVE-2026-41101

creationtimestamp| type| source ---|---|--- 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-20...

KLA91041 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft 365 Copilot for Android can be exploited remotely t...

CVE-2021-41101

wire-server is an open-source back end for Wire, a secure collaboration platform. Before version 2.106.0, the CORS Access-Control-Allow-Origin header set by nginz is set for all subdomains of .wire.com including wire.com. This means that if somebody were to find an XSS vector in any of the...

CVE-2025-41101

creationtimestamp| type| source ---|---|--- 2025-11-11 13:37:12+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eawut46ti2...

CVE-2023-41101

CVE-2023-41101 affects OpenNDS prior to 10.1.3. The vulnerability is in get_query() of http_microhttpd.c, which does not validate the length of the GET query string, leading to a stack-based overflow on 9.x and earlier and a heap-based overflow on 10.x and later. Impacted systems may crash (DoS) ...

CVE-2022-41101

Windows Overlay Filter Elevation of Privilege Vulnerability...

CVE-2022-41101

CVE-2022-41101 is a Windows Overlay Filter Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8 (HIGH). It is a LOCAL exploit requiring LOW privileges and no user interaction, with full impact on confidentiality, integrity, and availability as per the score. The provided documents id...

Microsoft Windows Multiple Vulnerabilities (KB5019959)

This host is missing an important security update according to Microsoft KB5019959 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5019964)

This host is missing a critical security update according to Microsoft KB5019964 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KB5019980: Windows 11 22H2 Security Update (November 2022)

The remote Windows host is missing security update 5019980. It is, therefore, affected by multiple vulnerabilities - AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions CVE-2022-23824 - Windows Group Policy Elevation of Privilege Vulnerability CVE-2022-37992, CVE-2022-41086 - Windo...

CVE-2021-41101

creationtimestamp| type| source ---|---|--- 2021-10-01 00:13:43+00:00| seen| https://t.me/cibsecurity/29764...

CVE-2021-41101 CORS `Access-Control-Allow-Origin` settings are too lenient

wire-server is an open-source back end for Wire, a secure collaboration platform. Before version 2.106.0, the CORS Access-Control-Allow-Origin header set by nginz is set for all subdomains of .wire.com including wire.com. This means that if somebody were to find an XSS vector in any of the...