146619 matches found
CVE-2026-48580 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-50301 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-48580
CVE-2026-48580 affects Microsoft Office Excel. The vulnerability is an untrusted pointer dereference in Excel that can allow an attacker to disclose information locally. Based on linked sources, this is a local vulnerability with medium severity (CVSS 3.1: 5.5) and requires user interaction; expl...
CVE-2026-50301
CVE-2026-50301 is a heap-based buffer overflow in Microsoft Office that allows local code execution. The provided documents confirm the affected product (Microsoft Office) and the impact (remote/local execution via heap overflow) but do not include detailed exploit steps or patch/fix information ...
CVE-2026-47642
CVE-2026-47642 is a Microsoft Office Excel vulnerability described as a use-after-free in Excel that enables a local attacker to execute code. The connected sources confirm the issue affects Microsoft Excel and is capable of arbitrary-code execution, with a CVSSv3.1 base score of 7.8 (HIGH). Atta...
CVE-2026-47290 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-47290 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-47642 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-47642 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-47290
CVE-2026-47290 is a Microsoft Office remote-code-execution vulnerability described as a use-after-free in Office components. Affected software includes Microsoft Office family (Word, Excel, PowerPoint, SharePoint) with the Office ecosystem cited in NCsc advisories and CIRCL sighting logs. The CVS...
CVE-2026-54115 Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
...
CVE-2026-50655
CVE-2026-50655 is a Windows Media/Media Foundation heap-based buffer overflow that allows local code execution by a non-privileged attacker with user interaction. It has concrete details in multiple connected sources: exploitation status on CIRCL (exploited in the wild), and Microsoft/MSRC entrie...
CVE-2026-50657
CVE-2026-50657 : Microsoft Defender for Mac/Endpoint information disclosure vulnerability that allows an authorized attacker to disclose private information locally. CVSS v3.1 base score 4.7 (Medium); attack vector LOCAL, no user interaction, high impact on confidentiality, requires low privilege...
CVE-2026-47295
CVE-2026-47295 describes an elevation-of-privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements used in SQL commands (SQL injection). The issue can be exploited by an authenticated attacker over a network to gain elevated privileges, with impact on c...
CVE-2026-47295 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-50458
CVE-2026-50458 is a use-after-free vulnerability in Microsoft Brokering File System that allows an authorized local attacker to elevate privileges. Exploitation details are not provided in the public text, but the NVD/CIRCL/ENISA references confirm local privilege escalation with a CVSS v3.1 base...
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability
...