VulnCheck KEV: CVE-2022-50997

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...

PT-2026-70463

Name of the Vulnerable Software and Affected Versions Microsoft Digest Authentication affected versions not specified Description A numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally. This issue enables attackers to gain...

PT-2026-70611

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

PT-2026-70750

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

PT-2026-70638

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...

PT-2026-70622

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

PT-2026-70711

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists that allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the system. Recommendations At the moment...

PT-2026-70720

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists in Microsoft Office Excel, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds...

PT-2026-70653

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-70412

Name of the Vulnerable Software and Affected Versions Microsoft High Performance Computing HPC Pack affected versions not specified Description Execution with unnecessary privileges allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

PT-2026-70555

Name of the Vulnerable Software and Affected Versions Microsoft QUIC affected versions not specified Description A use after free issue in Microsoft QUIC allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use after free is a memory corruption fl...

PT-2026-70536

Name of the Vulnerable Software and Affected Versions Microsoft Local Security Authority Server lsasrv affected versions not specified Description A heap-based buffer overflow occurs in the Microsoft Local Security Authority Server lsasrv, which is a process responsible for managing local securit...

PT-2026-70771

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description Improper control of code generation in Microsoft PowerShell enables an unauthorized attacker to locally bypass a security feature through code injection, which is the process of...

PT-2026-70600

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a...

PT-2026-70665

Name of the Vulnerable Software and Affected Versions Microsoft Teams for Android affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a technique where malicious scripts are injected into trusted websites. This...

PT-2026-70618

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

PT-2026-70705

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An off-by-one error occurs when a program writes or reads one element past the end of an array, which can lead to memory corruption or information disclosure. In this case, the...

PT-2026-70763

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...

PT-2026-70754

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description Use of an uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment,...

PT-2026-70646

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...