CVE-2026-70093

A heap-based buffer overflow exists in the Windows Rich Text Edit Control . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit information or workaround details are provided in the documents.

CVE-2026-70096

A heap-based buffer overflow exists in the Windows Rich Text Edit Control , which could allow an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. This vulnerability is rated with a CRITICAL CVSS score of 9.8 . Microsoft has released official updates to address this iss...

Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...

Windows Rich Text Edit Control Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network...

PT-2026-40131

Name of the Vulnerable Software and Affected Versions Windows Rich Text Edit Control affected versions not specified Description A double free issue in the Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally. A double free occurs when a program attempts to...

Microsoft Rich Text Edit Control 资源管理错误漏洞

Microsoft Rich Text Edit Control is a rich text editor implemented by Microsoft Corporation. There is a resource management vulnerability in Microsoft Rich Text Edit Control. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are affected:...

EUVD-2021-27631

Malicious code in bioql PyPI...

CVE-2021-40454

Rich Text Edit Control Information Disclosure Vulnerability...

CVE-2021-40454

Rich Text Edit Control Information Disclosure Vulnerability...

Information disclosure

Rich Text Edit Control Information Disclosure Vulnerability...

CVE-2021-40454 Rich Text Edit Control Information Disclosure Vulnerability

...

CVE-2021-40454

CVE-2021-40454 is an information-disclosure vulnerability in the Rich Text Edit Control used by Microsoft Office. The issue is documented as a local, low-complexity disclosure that can impact confidentiality (CVE-2021-40454) with a MEDIUM overall severity (CVSS v3.1 base score 5.5). The connected...

Microsoft Rich Text Edit Control 信息泄露漏洞

Microsoft Rich Text Edit Control is an implementation of a rich text editor from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Rich Text Edit Control, which arises from a configuration or other error in the operation of a networked system or product. An...

KLA12316 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Rich Text Edit Contr...

KLA12309 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service. Below is a...