CVE-2026-20922

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

CVE-2025-8090

CVE-2025-8090 describes a null pointer dereference in the MsgRegisterEvent() system call of the QNX Neutrino Kernel . Public details in connected sources indicate vulnerability within QNX SDP 7.1/7.0 and QNX OS for Safety 2.0–2.2, with an attacker able to gain local access and code execution to c...

Microsoft Excel Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...

Microsoft Office Click-To-Run Remote Code Execution Vulnerability

Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Word Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Security Updates for Microsoft Office Products (January 2026) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the january-13-2026 advisory. - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-20952, CVE-2026-20953 - Integer...

Security Updates for Microsoft Office Online Server (January 2026)

The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerabilities: - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2026-20950 - Untrusted pointer...

Connectify Hotspot code-related vulnerabilities

Connectify Hotspot is a virtual router software from Connectify USA. Connectify Hotspot 2018 suffers from a code issue vulnerability that stems from the presence of unquoted service paths in ConnectifyService, which could lead to the execution of arbitrary code by a local attacker...

BlueSoleilCS code-related vulnerabilities

BlueSoleilCS is a core component of BlueSoleil's Bluetooth Management Center. A code issue vulnerability exists in BlueSoleilCS version 5.4.277, which stems from the presence of unquoted service paths in the Windows service configuration, which could lead to the execution of arbitrary code by a...

PT-2026-2754

CVE-2026-20955 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. https://t.co/woPteDG0yH...

PT-2026-2762

Name of the Vulnerable Software and Affected Versions versions prior to 2026-21219 Description A use after free issue exists in Inbox COM Objects. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a newer version that contai...

PT-2026-2748

CVE-2026-20948 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. https://t.co/RWIO4Ijxeo...

PT-2026-2753

🟠 CVE-2026-20953 - High Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. https://t.co/3HYe8zgm3r https://t.co/TZ3AHieY4d...

PT-2026-2755

CVE-2026-20956 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. https://t.co/vbIQKtIzx7...

Sandboxie-Plus code issues and vulnerabilities

Sandboxie-Plus is a sandboxing isolation software from Sandboxie-Plus. A code issue vulnerability exists in Sandboxie-Plus version 5.50.2, which stems from the presence of unquoted service paths to the Windows service SpieSvc, which could lead to the execution of arbitrary code by a local attacke...

Clevo HotKey Clipboard code-related vulnerabilities

Clevo HotKey Clipboard is a clipboard enhancement tool from Blue Sky Computer Clevo of Taiwan, China. A code issue vulnerability exists in Clevo HotKey Clipboard version 2.1.0.6, which stems from an unquoted service path, and could lead to a local, unprivileged user executing code with system...