CVE-2023-36884-MS-Office-HTML-RCE

CVE-2023-36884: 조작된 문서를 통한 MS Office HTML RCE 2023년 7월 11일, Microsoft는 적극적으로 악용되고 있는 여러 원격 코드 실행RCE 취약점을 해결하기 위한 패치를 발표했습니다. 이 조치를 통해 유럽 및 북미 지역의 조직을 대상으로 하는 위협 행위자 Storm-0978이 주도한 피싱 캠페인이 밝혀졌습니다. 이 캠페인의 핵심은 CVE-2023-36884로 지정된 제로데이 취약점으로, 공격자가 우크라이나 세계 회의UWC와 관련된 지정학적 미끼가 포함된 정교하게 조작된 Office Ope...

mitigate-folina

mitigate-folina 「Folina」ゼロデイ CVE-2022-30190 および「Search」ナイトメア 現時点ではCVE未割り当て を緩和します このスクリプトは、Microsoftが推奨する方法に従って 影響を受けるレジストリキーをバックアップしてから削除し、CVE-2022-30190を緩和します。 「-revert」を指定すると、スクリプトはキーを再インポートします。 これは、Microsoftがパッチをリリースしたときに使用できます。 スクリプトは、管理者または NT-AUTHORITY\SYSTEM として実行する必要があります...

CVE-2026-70145

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-69911

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69608

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69600

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69585

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69554

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

CVE-2026-69507

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

CVE-2026-69453

Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

CVE-2026-69322

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

CVE-2026-69305

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

CVE-2026-68896

Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

EUVD-2026-73902

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-70145

CVE-2026-70145 is an out-of-bounds read in the Microsoft Windows Search Component that allows an authorized attacker to disclose information locally. The vulnerability is rated CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and no user interaction. The prim...

EUVD-2026-73680

Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-68896

CVE-2026-68896 is an absolute path traversal vulnerability in the Microsoft Windows Search Component that allows an authorized local attacker to achieve privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, with a CVSS 3.1 base score...

CVE-2026-69911

CVE-2026-69911 is a use-after-free vulnerability in the Microsoft Windows Search Component that allows a locally authenticated attacker to achieve local privilege escalation . The flaw requires low privileges , high attack complexity , and no user interaction , with unchanged scope and high impac...

EUVD-2026-73621

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69600

CVE-2026-69600 is a use after free vulnerability in the Microsoft Windows Search Component that allows an authorized attacker to perform local privilege escalation . The vulnerability requires low privileges, high attack complexity, and no user interaction, with high impact to confidentiality, in...