CVE-2026-48056

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s...

CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

Microsoft Office Word Information Disclosure Vulnerability

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

Microsoft PowerPoint Remote Code Execution Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

Azure Storage Explorer Elevation of Privilege Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft Office Information Disclosure Vulnerability

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

Microsoft Teams for Android Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network...

Microsoft SharePoint Server Spoofing Vulnerability

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft Office Information Disclosure Vulnerability

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

Microsoft Excel Information Disclosure Vulnerability

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

Power BI Remote Code Execution Vulnerability

Improper input validation in Power BI allows an authorized attacker to execute code over a network...

Windows Network Address Translation (NAT) Spoofing Vulnerability

Origin validation error in Windows Network Address Translation NAT allows an unauthorized attacker to perform spoofing over an adjacent network...

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...