271609 matches found
EUVD-2026-73265
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-77493
CVE-2026-77493 is a double free flaw in the Microsoft Windows Graphics Component that allows an unauthorized, remote attacker to achieve code execution over the network with no privileges or user interaction. The CNA-assigned CVSS 3.1 score is 9.8 (CRITICAL) , with high impact to confidentiality,...
CVE-2026-72986
CVE-2026-72986 is a heap-based buffer overflow in Graphic Fonts that allows an unauthorized attacker to achieve remote code execution over a network. The CNA (Microsoft) assigns a CVSS 3.1 score of 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-reachable exp...
EUVD-2026-73260
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...
EUVD-2026-73255
Use after free in IP Helper allows an unauthorized attacker to execute code over a network...
CVE-2026-77495
CVE-2026-77495 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning it is exploitable over the network with low com...
EUVD-2026-73242
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69778
CVE-2026-69778 is a heap-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The CVSS v3.1 score is 8.8 (HIGH) with a network vector, low complexity, no required privileges, but user interaction required . CISA's SSVC assessment in...
EUVD-2026-73243
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
CVE-2026-69759
CVE-2026-69759 is a stack-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , with the vector requiring user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), meaning an a...
CVE-2026-69764
CVE-2026-69764 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized, remote attacker to achieve code execution over a network , rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. User interaction is required, and no known exploitation has b...
cve-2021-42013.get
Apache 2.4.50 - 路径遍历或远程代码执行 cve-2021-42013.py 是一个 Python 脚本，用于帮助发现 Apache 2.4.50 中的路径遍历或远程代码执行漏洞。我们提供了存在漏洞的 Docker 实例，以便您动手实践 CVE-2021-42013 如果启用了 CGI-BIN，那么我们可以执行远程代码执行，但不能执行路径遍历，因此我们在 httpd.conf 的 Alias 部分下添加了 "icons" 目录，用于检查路径遍历漏洞。 httpd.conf 中的漏洞配置 root@kitploit: 1. Enable CGI-BIN 2. Add...
EUVD-2026-73241
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73239
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
EUVD-2026-73154
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
CVE-2026-69742
CVE-2026-69742 is an integer overflow or wraparound vulnerability in Microsoft Office Publisher that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a low-complexity n...
CVE-2026-69724
CVE-2026-69724 is a missing authorization vulnerability in Microsoft Office SharePoint that allows an authorized attacker to achieve remote code execution over a network. The Microsoft CNA rates it CVSS 3.1 Base 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attac...
CVE-2026-69722
Microsoft Office Word is affected by a stack-based buffer overflow that enables an unauthorized attacker to achieve remote code execution over a network . The vulnerability requires user interaction (e.g., opening a crafted document) but needs no prior authentication. The CVSS 3.1 score is 8.8 (H...