2077 matches found
CVE-2026-68828
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-64918
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-58649
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-62804
CVE-2026-62804 is an external control of file name or path vulnerability in Microsoft Office Word that allows an unauthorized attacker to execute code locally. The flaw requires user interaction (e.g., opening a crafted file) and no prior privileges, with high impact to confidentiality, integrity...
EUVD-2026-73919
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-85875
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) , with a local attack vector, low complexity, no privileges required, and user interaction required. Impact is limited to confidentiality...
CVE-2026-83997
CVE-2026-83997 is a use-after-free vulnerability in Windows Message Queuing that allows an unauthorized attacker to achieve remote code execution over the network. The CNA-assigned CVSS 3.1 score is 8.1 (HIGH) , with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network attack vecto...
CVE-2026-69381
CVE-2026-69381 is an out-of-bounds read in the Windows Storage Port Driver that allows an unauthorized attacker with physical access to disclose information. The vulnerability requires no prior privileges or user interaction, but the physical attack vector limits its practical exploitability. The...
CVE-2026-83951
A buffer over-read in Microsoft Office Word allows an unauthorized attacker to locally disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N , meaning local access, low complexity, no privileges required, user interaction required, and high conf...
EUVD-2026-73890
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-81948
Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized local attacker to execute arbitrary code. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges, and results in high impact to confidentiality, integrity, an...
CVE-2026-81950
CVE-2026-81950 is a double free vulnerability in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity, no privileges required, and user interaction required, resulting in high i...
EUVD-2026-73881
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-73879
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-73877
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-81951
CVE-2026-81951 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity, no privileges required, and user interaction required (i.e., a vict...
CVE-2026-81955
A heap-based buffer overflow in the Microsoft Windows Graphics Component allows an unauthorized, remote attacker to achieve code execution over a network . The vulnerability requires user interaction but no prior privileges. Microsoft rates it CVSS 8.8 (HIGH) with full impact on confidentiality, ...
EUVD-2026-73876
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81957
CVE-2026-81957 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized, local attacker to execute code on the system. The attack requires user interaction (e.g., opening a crafted file) but no prior privileges. Microsoft rates the CVSS 3.1 score at 7.8 (HIGH) ...