268 matches found
CVE-2026-65658
CVE-2026-65658 involves a deserialization vulnerability in Microsoft Office SharePoint that can allow an authorized attacker to execute arbitrary code over the network. The published description identifies deserialization of untrusted data as the root cause, with the CVSS 3.1 base score of 8.8 (H...
CVE-2026-65657 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-55040 Microsoft SharePoint Server Security Feature Bypass Vulnerability
...
CVE-2026-4893
...
CVE-2026-40706
...
CVE-2026-22004
...
CVE-2026-34293
...
CVE-2026-35239
...
CVE-2026-41254
...
CVE-2018-25238
VSCO 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string through the search functionality. Attackers can paste a buffer of 5000 characters into the search bar and navigate back to trigger an application...
Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.
...
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.
...
CVE-2025-12969
...
Exploit for Authentication Bypass by Capture-replay in Microsoft
cve-2025...
A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination. Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.
...
Microsoft Remote Access Point-to-Point Protocol (PPP) EAP-TLS 资源管理错误漏洞
Microsoft Remote Access Point-to-Point Protocol PPP EAP-TLS is a secure authentication mechanism from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Remote Access Point-to-Point Protocol PPP EAP-TLS. An attacker could exploit the vulnerability to elevate...
CVE-2024-4030
...
Microsoft MapUrlToZone 安全漏洞
Microsoft MapUrlToZone is a lightweight console application written in C++ by Microsoft Corporation USA. A security vulnerability exists in Microsoft MapUrlToZone. An attacker exploiting this vulnerability could bypass certain functionality. The following products and editions are affected:Window...
CVE-2024-30166
...
2024-10 Dynamic Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5044273)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...