1116380 matches found
EUVD-2026-56588
Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...
CVE-2026-70335
The CVE-2026-70335 entry concerns an os command injection in GitHub Copilot and Visual Studio Code due to improper neutralization of special elements. This allows a local attacker to achieve elevation of privileges. The public records identify affected products (GitHub Copilot and VS Code) and de...
CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
...
CVE-2026-70329 Microsoft Outlook Remote Code Execution Vulnerability
...
EUVD-2026-56585
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-70329 Microsoft Outlook Remote Code Execution Vulnerability
...
CVE-2026-70329
CVE-2026-70329 describes an integer overflow or wraparound in Microsoft Office Outlook that allows an unauthenticated attacker to achieve remote code execution over a network . The associated metrics indicate a CVSS v3.1 base score of 8.8 (HIGH) with attack vector: NETWORK , attack complexity: LO...
EUVD-2026-56573
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-70321 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-70321
CVE-2026-70321: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Affected software is Microsoft SharePoint; root cause is deserialization of untrusted data. Impact is high (CVE-2026-70321 CVSS 3.1: 8.8/10). No remediati...
CVE-2026-70321 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-70313 Microsoft PowerPoint Remote Code Execution Vulnerability
...
EUVD-2026-56568
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-70311 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-70311
CVE-2026-70311 : The vulnerability is a Use-After-Free in Microsoft Office Word that allows an unauthenticated or local attacker to execute arbitrary code. The issue stems from a memory-management defect in Word that can be triggered locally, with the CVSSv3.1 vector indicating local attack, no p...
CVE-2026-70313 Microsoft PowerPoint Remote Code Execution Vulnerability
...
CVE-2026-70313
CVE-2026-70313 affects Microsoft Office PowerPoint and is described as an improper input validation issue that can lead to local information disclosure. CVSS 3.1 vector (LOCAL, LOW attack complexity, NONE privileges, USER interaction required) yields a base score of 7.8 (HIGH). The provided docum...