CVE-2026-108457

Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

CVE-2026-110111

Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. Attackers can point xo-server at a malicious ESXi host serving a craft...

UBUNTU-CVE-2026-110111

Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. Attackers can point xo-server at a malicious ESXi host serving a craft...

CVE-2026-105714

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105717

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105715

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-105716

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105718

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-105591

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105592

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105593

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105598

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105599

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

CVE-2026-105596

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105013

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-103575

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-103572

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-102857

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...

CVE-2026-102858

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

CVE-2026-102856

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...