152825 matches found
CVE-2026-50512: Missing Authentication for Critical Function
Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
Microsoft Office 缓冲区错误漏洞
Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There are security vulnerabilities in Microsoft Office. Attackers can exploit these...
CVE-2026-47638: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
Security Updates for Microsoft Office Products (June 2026)
The Microsoft Office Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-44819, CVE-2026-44824, CVE-2026-45461, CVE-2026-45463,...
The vulnerability of Google Chrome and Microsoft Edge browsers, related to a data source confirmation error, allows attackers to circumvent security restrictions.
The vulnerability of Google Chrome and Microsoft Edge is related to a data source confirmation error during the processing of DOM objects. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...
The vulnerability of the Media components in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the Media components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
CVE-2026-45456: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-42986: Use After Free
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-45455: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
PT-2026-47952
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
KLA91096 PE vulnerability in Microsoft System Center
Privilege escalation vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-45647 Exploitation Related products Windows-Defender CVE list CVE-2026-45647 high Solution Install necessary updates from the KB...
Microsoft Office Excel 缓冲区错误漏洞
Microsoft Excel is a spreadsheet software within the Office suite developed by the American company Microsoft. There is an information leakage vulnerability in Microsoft Excel, and attackers can exploit this vulnerability to obtain sensitive information...
Microsoft Teams for Android 输入验证错误漏洞
Microsoft Teams is a software product developed by the American company Microsoft, used for online meetings, chatting, and cloud storage functions. There is a vulnerability in Microsoft Teams. Attackers can exploit this vulnerability to obtain sensitive information...
Microsoft Windows Narrator Braille 权限许可和访问控制问题漏洞
Microsoft Windows is an operating system used on personal devices by the American company Microsoft. There are code-related vulnerabilities in Microsoft Windows Narrator Braille. Attackers can exploit these vulnerabilities to gain higher privileges...
PT-2026-48100
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network. Cross-si...
Microsoft .NET 授权问题漏洞
Microsoft .NET is a software framework developed by Microsoft Corporation in the United States. It focuses on agile software development, rapid application development, platform independence, and transparency in networking. There are vulnerabilities related to licensing in Microsoft .NET. Attacke...
PT-2026-48013
Name of the Vulnerable Software and Affected Versions Microsoft Bing Search Android versions prior to 33.3 Description A user interface UI misrepresentation of critical information allows an unauthorized attacker to perform spoofing over a network. By using a crafted URL, an attacker can manipula...
PT-2026-48028
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. This issue enables Remote Code Execution RCE, which is...
PT-2026-48035
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network. Cross-si...