148351 matches found
CVE-2026-40360
CVE-2026-40360 is an information-disclosure vulnerability in Microsoft Excel caused by an out-of-bounds read, enabling a local attacker to disclose data. The available documents identify the affected product as Microsoft Excel and describe a local attack that could lead to confidential informatio...
CVE-2026-40360 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-35440
CVE-2026-35440 affects Microsoft Word (Office) with an information-disclosure vulnerability where files or directories accessible to external parties enable a local attacker to disclose information. The CVSS vector indicates Local attack, Low attack complexity, No privileges required, and User In...
CVE-2026-40360
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-40360 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-35439 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-35439 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-35439
CVE-2026-35439 is a remote code execution vulnerability in Microsoft SharePoint Server caused by deserialization of untrusted data. An authorized attacker can exploit this over a network to execute code on affected systems. The CVE is associated with SharePoint Server (on‑premises) and the approv...
CVE-2026-35433
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally...
CVE-2026-34330
Technical details about CVE-2026-34330 (Win32K GRFX integer overflow leading to local privilege elevation) are not publicly provided in the supplied connected documents. Please monitor official advisories (MSRC/NVD) for affected products, impact, and fixes.
CVE-2026-34329 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
...
CVE-2026-34329 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
...
CVE-2026-34329
CVE-2026-34329 is a heap-based buffer overflow in Windows Message Queuing (MSMQ) that could allow an unauthenticated attacker to execute code over an adjacent network. Public details in provided connected documents describe MSMQ as affected and classify the vulnerability as remote code execution;...
CVE-2026-40379 Azure Entra ID Spoofing Vulnerability
...
CVE-2026-40379
CVE-2026-40379 is a Microsoft ESTS (Enterprise Security Token Service) spoofing vulnerability impacting Azure services. The connected sources confirm exposure of sensitive information to an unauthorized actor in Azure Entra ID and describe exploitation as network-based spoofing. The CVSS 3.1 scor...
.NET 9.0 Update - May 12, 2026
None None...
Service Update 1.44 for Microsoft Dynamics CRM (on-premises) 9.1
None None...
Description of the security update for Word 2016: May 12, 2026 (KB5002858)
None None...
