10355 matches found
CVE-2026-68804
CVE-2026-68804 : A numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability is documented across multiple sources (NVD, CVE listings) with the impact described as local code execution and a high base score (CVSS 3.1: AV=L, AC=L,...
CVE-2026-68803
CVE-2026-68803: A type confusion in Microsoft Excel enables local code execution. Affects Microsoft Excel (Office). Exploitation details: requires user interaction and local access per CVSS, with high impact on confidentiality, integrity, and availability. Root cause: resource access using an inc...
CVE-2026-66802
CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...
CVE-2026-64915 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-64906 Microsoft Access Remote Code Execution Vulnerability
...
EUVD-2026-56665
Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network...
CVE-2026-69320
CVE-2026-69320 concerns Visual Studio Code. The issue is an improper neutralization of special elements used in an OS command (OS command injection) that could allow an unauthorized attacker to execute code remotely over a network. Affected product is Visual Studio Code; the root cause is imprope...
EUVD-2026-56419
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability
...
EUVD-2026-56318
Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...
CVE-2026-49179
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
EUVD-2026-56533
Protection mechanism failure for some IntelR Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. Thi...
EUVD-2026-56524
Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...
CVE-2026-20769
Improper conditions check for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...
Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Office Word Remote Code Execution Vulnerability
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally...
Windows Message Queuing Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...