145732 matches found
EUVD-2026-56452
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-68793
CVE-2026-68793 involves an out-of-bounds read in Microsoft Office Excel that enables an unauthorized attacker to execute code locally. Affected software: Microsoft Excel. Vulnerable component: Excel handling leading to a out-of-bounds read; root cause stated as such. Impact: local code execution ...
CVE-2026-68792 Microsoft Office Elevation of Privilege Vulnerability
...
CVE-2026-68792 Microsoft Office Elevation of Privilege Vulnerability
...
EUVD-2026-56451
Improper neutralization of special elements used in a command 'command injection' in Microsoft Office allows an authorized attacker to elevate privileges locally...
CVE-2026-68792
CVE-2026-68792 concerns a Microsoft Office command-injection vulnerability (improper neutralization of special elements used in a command) that allows an authorized, local attacker with low privileges and no user interaction to achieve local privilege elevation. Impacted aspects: confidentiality,...
CVE-2026-65815
CVE-2026-65815 affects Microsoft Dynamics 365 On-Premises. The vulnerability arises from deserialization of untrusted data, enabling an authenticated attacker to execute code remotely over a network. Affected component is the on-premises Dynamics 365 deployment; the underlying root cause is impro...
CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
EUVD-2026-56449
Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...
CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
EUVD-2026-56447
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-65813
SSRF in Microsoft Exchange Server lets an authenticated attacker escalate privileges over the network. NVD scores it HIGH (CVSS 8.8), while Microsoft's CNA rates it MEDIUM (6.5) with confidentiality impact only. Microsoft has released fixes: KB5121573 (Exchange Server Subscription Edition RTM), K...
CVE-2026-65807 Microsoft Excel Remote Code Execution Vulnerability
...
EUVD-2026-56445
Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-65807
Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-65807 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-65811
CVE-2026-65811 : This entry concerns Power BI with an issue described as improper input validation that allows an authorized attacker to execute code over a network. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 8.8 (HIGH). Affected component and root cause are stated onl...
CVE-2026-65807
Microsoft Excel is affected by CVE-2026-65807 due to a type confusion in resource access, allowing remote code execution over a network. The vulnerability arises from incompatible type handling in a resource access path within Excel, impacting users of Microsoft Office Excel. The CVSS 3.1 base sc...