146760 matches found
CVE-2026-45645
The provided data identify CVE-2026-45645 as a heap-based buffer overflow affecting Microsoft Office, enabling local code execution. Details show an exploit would require user interaction and has a local attack surface (attackVector: LOCAL, userInteraction: REQUIRED) with high impacts on confiden...
CVE-2026-45645 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-45643 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-45642 Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability
...
CVE-2026-45643
Summary of CVE-2026-45643 : Affected product is Microsoft Word (Office). The vulnerability is an untrusted pointer dereference in Word that allows an attacker to achieve local code execution on a vulnerable system with high impact (confidentiality, integrity, and availability). The CVSS-3.1 vecto...
CVE-2026-45642 Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability
...
CVE-2026-45643 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-45606 Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
...
CVE-2026-45583 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2026-45583 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2026-45504 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-45504
CVE-2026-45504 is an SSRF-based elevation of privilege in Microsoft Exchange Server . The entry notes an attacker who is authorized can elevate privileges over the network. CVSS v3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and LOW privileges required, with NONE...
CVE-2026-45504 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-45503 Microsoft Exchange Server Information Disclosure Vulnerability
...
CVE-2026-45503 Microsoft Exchange Server Information Disclosure Vulnerability
...
CVE-2026-45502 Microsoft Exchange Server Information Disclosure Vulnerability
...
CVE-2026-45501
CVE-2026-45501 concerns Microsoft Exchange Server. The issue is improper neutralization of input during web page generation, i.e., a cross-site scripting vulnerability that can allow an unauthorized attacker to perform spoofing over a network. CVSS 3.1 base score 6.5 (Medium): attack vector Netwo...
CVE-2026-45501
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
CVE-2026-45501 Microsoft Exchange Server Spoofing Vulnerability
...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack via improper link resolution before file access. An attacker can modify local files by exploiting symbolic links to redirect file operations to unintended locations. Remediation Upgrade...