5253 matches found
CVE-2026-45659
CVE-2026-45659 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-q6jf-24jf-m3cg. This link is maintained to preserve external references. Original Description Insertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose information...
CVE-2026-96020
Out-of-bounds write in DNS Server allows an authorized attacker to execute code over a network...
CVE-2026-95908
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information locally...
CVE-2026-119396
Improper access control in Windows Remote Access API allows an authorized attacker to perform tampering locally...
CVE-2026-118149
Improper control of generation of code 'code injection' in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
CVE-2026-116932
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-112736
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-109485
Server-side request forgery ssrf in Microsoft 365 Agents SDK allows an authorized attacker to disclose information over a network...
CVE-2026-109454
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-122538
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-122532
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-119396
A vulnerability exists in the Windows Remote Access API due to improper access control , which allows an authorized attacker to perform local tampering . Impacted systems include Windows Server 2016 , Windows 10 (various versions), and Windows Server 2025 . Remediation is provided via the Novembe...
CVE-2026-123395
A code injection vulnerability (CWE-94) exists in Microsoft Office Excel . This flaw allows an authorized attacker to disclose information locally by exploiting improper control of code generation. No specific affected versions or remediation steps are provided in the documentation, and no exploi...
EUVD-2026-122240
Improper control of generation of code 'code injection' in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
CVE-2026-118149
A code injection vulnerability in Microsoft Exchange Server allows an authorized attacker to execute arbitrary code over a network with process-level rights. This vulnerability is classified as HIGH severity with a CVSS score of 8.8. Microsoft has released security updates to resolve this issue; ...
EUVD-2026-122194
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-111303
A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to improper neutralization of input during web page generation. This flaw allows an authorized attacker to perform spoofing over a network. The vulnerability is addressed in security update KB5002945 for SharePoi...
CVE-2026-109504
A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to improper neutralization of input during web page generation. This flaw allows an authorized attacker to perform spoofing over a network. Remediation is available via security update KB5002945 for SharePoint Se...