5932 matches found
Exploit for CVE-2022-30190
LetsDefend-SOC173-Follina-0-Day-Detected We are presented with...
Mammoth is vulnerable to Directory Traversal
Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth before 1.11.0; versions of the package org.zwobble.mammoth:mammoth before 1.11.0 are vulnerable to Directory Traversal due to the lack of...
Microsoft Word Code Execution Vulnerability (CNVD-2025-26720)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute code...
Microsoft Office Code Execution Vulnerability (CNVD-2025-24419)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...
Mammoth 安全漏洞
Mammoth is a tool for converting Word documents to HTML by the individual developer Michael Williamson. A security vulnerability exists in mammoth version 0.3.25 and versions prior to 1.11.0, which stems from a lack of path or file type validation when processing docx files, and could lead to a...
Microsoft Word Code Execution Vulnerability (CNVD-2025-26721)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
CVE-2025-59222
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-59221
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
EUVD-2025-34570
The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...
The vulnerability of the OLE Document DIFAT Parser component of the program for extracting readable text from MS-Word catdoc files allows a perpetrator to execute arbitrary code.
The vulnerability of the OLE Document DIFAT Parser component of the program for extracting readable text from MS-Word catdoc files is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Microsoft Word 2016 Multiple Vulnerabilities (KB5002789)
This host is missing an important security update according to Microsoft KB5002789 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
The vulnerability of the OLE Document File Allocation Table Parser component of the text extraction software, which can read text from MS-Word catdoc files, allows a hacker to execute arbitrary code.
The vulnerability of the OLE Document File Allocation Table Parser component of the MS-Word catdoc file extraction tool is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
EUVD-2025-34287
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
EUVD-2025-34286
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-59222
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-59221
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-59222
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-59221
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-59222
CVE-2025-59222 is a Microsoft Word use-after-free vulnerability that enables local code execution. Connected sources confirm Word/Office components are affected and that an update is available (Word 2016 KB5002789; October 2025 Office updates) addressing the issue. No exploitation status is provi...
