PT-2026-70754

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description Use of an uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment,...

PT-2026-70653

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-70618

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

PT-2026-70639

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally...

Security Updates for Microsoft Office Products (August 2026)

The Microsoft Office Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-63513, CVE-2026-63533, CVE-2026-65661 - Integer overflow or...

Security Bulletin: Immutable.js Denial of Service Vulnerabilities in Content Cortex for Microsoft Office

Summary Immutable.js versions before 4.3.9 and 5.1.8 have two DoS vulnerabilities CVSS 7.5, High. CVE-2026-59879 is an integer overflow in List operations set, setSize, setIn, updateIn that can cause infinite loops or unbounded memory allocation when given index/size values between 2^30 and 2^31...

[SECURITY] Fedora 43 Update: python-wsgidav-4.3.5-1.fc43

A generic and extendable WebDAV server written in Python and based on WSGI. Main features: =E2=80=A2 WsgiDAV is a stand-alone WebDAV server with SSL support, that can be installed and run as Python command line script. =E2=80=A2 The python-pam library is needed as extra requirement if pam-login...

CVE-2026-70332

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability

...

CVE-2026-70332

CVE-2026-70332 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an unauthorized attacker to perform network spoofing. The connected sources consistently identify SharePoint as affected and report SSRF as the underlying issue, with related entries also refe...

CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability

...

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

KLA91193 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Service Bus can be exploited...

EUVD-2026-52536

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-62870

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-67554

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

KLA91186 ACE vulnerability in Microsoft Office

Arbitrary code execution vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-62870 Exploitation CVE list CVE-2026-62870 critical KB list 5002886 Solution Install necessary updates from the KB section,...

EUVD-2025-210534

https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...

CVE-2025-67406

https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...

CVE-2025-67406

CVE-2025-67406 concerns an SQL Injection in Advocate office management system 1.0. The vulnerability resides in activate_case.php (parameter id, accessed via GET http://localhost/advocate/kortex_lite/control/activate_case.php?id=1) where unsanitized user input is interpolated into an SQL query. D...