146753 matches found
CVE-2026-44817
CVE-2026-44817 is an Excel vulnerability: an integer underflow (wrap/wraparound) in Microsoft Excel could allow a local attacker to execute code. Exploitation details in the public metrics show local access with user interaction required and high impact on confidentiality, integrity, and availabi...
CVE-2026-44817 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-42902 Microsoft PowerToys Elevation of Privilege Vulnerability
...
CVE-2026-42902 Microsoft PowerToys Elevation of Privilege Vulnerability
...
CVE-2026-42902
CVE-2026-42902 (Microsoft PowerToys) : The set of connected documents identifies an elevation-of-privilege issue due to improper authorization in PowerToys. A local, low-privilege attacker with no user interaction could exploit this to gain high-impact privileges (CVE-2026-42902). CVSSv3.1 base s...
CVE-2026-45483 Microsoft Office Project Server Spoofing Vulnerability
...
CVE-2026-45485 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-45485 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-45485
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-45485
CVE-2026-45485: In Microsoft Office, an out-of-bounds read leads to local information disclosure. Documents confirm the vulnerability and its impact (local disclosure) with low severity (CVSS 3.1:3.3). Exploitation details and affected component/version specifics are not provided in the supplied ...
CVE-2026-45486 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-45486
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-45486 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-45479 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-45486
CVE-2026-45486 concerns an untrusted pointer dereference in Microsoft Word that can allow a local attacker to execute code. The CVSS metrics indicate a HIGH base score (7.8) with LOCAL attack vector, LOW attack complexity, and user interaction required, privileges NONE, reflecting a local impact ...
CVE-2026-45479 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-45474 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-45474
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-45474
The documents confirm CVE-2026-45474 is a Microsoft Office vulnerability described as a heap-based buffer overflow that allows an unauthenticated/unauthorized attacker to execute code locally on affected systems. Affected product is Microsoft Office, with the root cause identified as a heap-based...