145729 matches found
CVE-2026-72970 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
EUVD-2026-58754
Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-72970
Technical details about CVE-2026-72970 are not publicly available in the provided documents. Monitor official vendor advisories and security bulletins for updates.
Microsoft Defender Elevation of Privilege Vulnerability
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
PT-2026-72125
Name of the Vulnerable Software and Affected Versions Microsoft Defender affected versions not specified Description An elevation of privilege exists in the Microsoft Malware Protection Engine in Microsoft Defender, publicly referred to as "ShieldBreak". Recommendations At the moment, there is no...
PT-2026-72120
Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an authorized attacker to execute code locally. Recommendations At the moment,...
KLA91223 PE vulnerability in Microsoft System Center
Privilege escalation vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-69414 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Malware-Protection-Engine CVE list...
Security Updates for Microsoft Dynamics 365 (on-premises) (August 2026)
The Microsoft Dynamics 365 on-premises is missing security updates. It is,therefore, affected by the following vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network. CVE-2026-65815 - Exposure of...
Microsoft PowerShell 7.4.x < 7.4.19 / 7.5.x < 7.5.10 / 7.6.x < 7.6.5 Multiple Vulnerabilities (August 2026)
The version of Microsoft PowerShell installed on the remote host is 7.4.x prior to 7.4.19, 7.5.x prior to 7.5.10, or 7.6.x prior to 7.6.5. It is, therefore, affected by multiple vulnerabilities: - Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code...
EUVD-2024-55719
Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resources by supplying a path traversal sequence in the request URI to bypass the oauthservlet authentication filter. Attacke...
.NET: .NET Information Disclosure Vulnerability
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
.NET: .NET Information Disclosure Vulnerability
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
Microsoft Exchange - Authentication Bypass
Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability enables an attacker to bypass authentication and gain access to the Exchange Server's internal. id: CVE-2021-33766 info: name: Microsoft Exchange - Authentication Bypass author: daffainfo severity: high description...
Security Updates for Microsoft Office Products C2R (August 2026)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-63513, CVE-2026-63519, CVE-2026-63533, CVE-2026-64898,...
Security Updates for Microsoft Excel Products C2R (August 2026)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. CVE-2026-65807 - Heap-based...
Security Updates for Microsoft Outlook Products C2R (August 2026)
The Microsoft Outlook Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. CVE-2026-70329 - Heap-based buffer overflow in Microsof...
Security Updates for Microsoft PowerPoint Products C2R (August 2026)
The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability: - Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. CVE-2026-68809 Note that Nessus has not tested for this...
Security Updates for Microsoft Word Products C2R (August 2026)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-58651, CVE-2026-64915 - Stack-based buffer overflow in Microsof...
VulnCheck KEV: CVE-2024-58374
Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resources by supplying a path traversal sequence in the request URI to bypass the oauthservlet authentication filter. Attacke...