5932 matches found
opensquat
openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...
EUVD-2026-63617
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-70105
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-70105 Microsoft Word Information Disclosure Vulnerability
...
CVE-2026-70105
CVE-2026-70105 is an improper input validation vulnerability in Microsoft Office Word that allows an unauthorized, remote attacker to disclose information over a network . The attack requires user interaction (e.g., opening a crafted document) and no prior privileges. CVSS v3.1 score is 6.5 (Medi...
CVE-2026-70105 Microsoft Word Information Disclosure Vulnerability
...
Microsoft Word Information Disclosure Vulnerability
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
PT-2026-79217
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-74234
Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to achieve arbitrary JavaScript execution in a victim's browser by embedding a Mermaid block prefixed with a gray-matter JavaScript front-matter directive, causing the front-matter parser to invoke eval...
CVE-2026-74234
Legora before 2026-08-14 renders Mermaid diagrams by running a gray-matter front-matter parser that calls eval() before SVG sanitization, letting attackers inject arbitrary JavaScript via crafted diagram content. Impact is elevated on Word and Outlook add-in surfaces where bearer session tokens a...
PT-2026-76764
Name of the Vulnerable Software and Affected Versions Legora versions prior to 2026-08-14 Description A cross-site scripting issue exists where attackers can execute arbitrary JavaScript in a victim's browser. This occurs when a Mermaid block is prefixed with a gray-matter JavaScript front-matter...
The vulnerability in Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise allows a perpetrator to disclose protected information.
The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Security Updates for Microsoft Word Products C2R (August 2026)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-58651, CVE-2026-64915 - Stack-based buffer overflow in Microsof...
Security Updates for Microsoft Office Products (August 2026) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the august-11-2026 advisory. - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-70311 - Access of resource using...
CVE-2026-70319
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-70310
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...