Lucene search
+L

1990 matches found

Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•34 views

PT-2026-49266

Name of the Vulnerable Software and Affected Versions LibreOffice affected versions not specified Description A stack buffer overflow occurs when importing presentations in the legacy binary PPT format. The issue arises during the import of a colour-replacement record where two fixed-size colour...

7.8CVSS6.8AI score0.00227EPSS
SaveExploits0References42
Tenable Nessus
Tenable Nessus
•added 2026/06/15 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-8356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. Two fixed-size...

6.9CVSS6AI score0.00167EPSS
SaveExploits0References3
osv_oesa
osv_oesa
•added 2026/06/12 11:11 a.m.•29 views

OESA-2026-2614 catdoc security update

catdoc is program which reads one or more Microsoft word files and outputs text, contained insinde them to standard output. Therefore it does same work for.doc files, as unix cat command for plain ASCII files. It is now accompanied by xls2csv - program which converts Excel spreadsheet into...

7.8CVSS8.2AI score0.0033EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•46 views

Microsoft Win32k Digital Error Vulnerability

Microsoft Win32k is a system file used by Microsoft for multi-user management in Windows. There are security vulnerabilities in Microsoft Win32k. Attackers can exploit these vulnerabilities to execute unauthorized code...

7.8CVSS7.6AI score0.00466EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•43 views

Microsoft Office buffer error vulnerability

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is a code execution vulnerability in Microsoft Office, which is caused by improper...

7.8CVSS7.9AI score0.00571EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•31 views

Microsoft Office buffer error vulnerability

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is a security vulnerability in Microsoft Office, which stems from a heap buffer overflow...

7.8CVSS7.4AI score0.00571EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•36 views

Microsoft Excel for Android: Permissions management and access control issues

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is an access control error vulnerability in Microsoft Office. Attackers utilize this...

7.1CVSS6.8AI score0.00443EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:15 p.m.•29 views

CVE-2026-42079

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval of LLM-generated code with builtins in scope. This issue has been patched via commit 418491a...

8.6CVSS6.4AI score0.00212EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/03 4:02 p.m.•25 views

CVE-2026-46722

The OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read or outbound HTTP requests to be performed, with the retrieved content being written to the search index...

5.9CVSS5.8AI score0.00388EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/19 9:23 a.m.•20 views

CVE-2026-46722

The OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read or outbound HTTP requests to be performed, with the retrieved content being written to the search index...

5.9CVSS5.8AI score0.00388EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/05/19 9:23 a.m.•39 views

EUVD-2026-30859

The OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read or outbound HTTP requests to be performed, with the retrieved content being written to the search index...

5.9CVSS5.8AI score0.00388EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/19 9:23 a.m.•23 views

CVE-2026-46722 XML External Entity Injection in extension "Faceted Search" (ke_search)

The OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read or outbound HTTP requests to be performed, with the retrieved content being written to the search index...

5.9CVSS5.8AI score0.00388EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/19 12:00 a.m.•47 views

PT-2026-41862

The OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read or outbound HTTP requests to be performed, with the retrieved content being written to the search index...

5.9CVSS5.8AI score0.00388EPSS
SaveExploits0References2
CNVD
CNVD
•added 2026/05/18 12:00 a.m.•38 views

Microsoft Office Exploitation Vulnerability (CNVD-2026-23631)

Microsoft Office is a suite of office software products developed by the American company Microsoft. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. Microsoft Office has a deception vulnerability that attackers can exploit to carry out deceptive attacks...

7.7CVSS5.8AI score0.00313EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/05/15 12:00 a.m.•23 views

Microsoft PowerPoint Android Access Control Error

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software on Android operating systems is related to access control errors. Exploiting this vulnerability can allow attackers to carry out spoofing attacks...

7.1CVSS6.5AI score0.0031EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2026/05/13 8:22 p.m.•15 views

CVE-2026-41102

Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally...

7.1CVSS5.8AI score0.0031EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•43 views

EUVD-2026-29688

Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally...

7.1CVSS5.8AI score0.0031EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/12 6:17 p.m.•25 views

CVE-2026-41102

Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally...

7.1CVSS0.0031EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/12 4:58 p.m.•15 views

CVE-2026-41102 Microsoft PowerPoint for Android Spoofing Vulnerability

...

7.1CVSS7AI score0.0031EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/12 4:58 p.m.•85 views

CVE-2026-41102

CVE-2026-41102 affects Microsoft Office PowerPoint with an improper access control, enabling a locally authenticated attacker to spoof content. Descriptions across sources indicate PowerPoint is the affected component, with the vulnerability enabling spoofing at local scope (attack vector: local;...

7.1CVSS6.9AI score0.0031EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder