306 matches found
Security Updates for Microsoft PowerPoint Products C2R (August 2026)
The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability: - Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. CVE-2026-68809 Note that Nessus has not tested for this...
The vulnerability of the Click-to-Run package services for Microsoft Office and Microsoft 365 Apps for Enterprise allows a perpetrator to enhance their privileges.
The vulnerability of the Click-to-Run package services for Microsoft Office and Microsoft 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to enhance their privileges...
Security Updates for Microsoft Office Products C2R (June 2026)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-44819, CVE-2026-44824, CVE-2026-45461, CVE-2026-45463,...
CVE-2026-47293
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
CVE-2026-47293
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
CVE-2026-47293 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-47293 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
EUVD-2026-35575
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
CVE-2026-47293
CVE-2026-47293 describes a use-after-free vulnerability in Microsoft Office Click-To-Run that could allow an authorized, local attacker to elevate privileges. Affected component is Microsoft Office Click-To-Run; root cause is use-after-free. The published metrics indicate a high-severity impact (...
Description of the security update for Office 2016: June 9, 2026 (KB5002878)
None None...
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
CVE-2026-47293: Use After Free
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
PT-2026-48027
Name of the Vulnerable Software and Affected Versions Microsoft Office and Microsoft 365 Apps for Enterprise affected versions not specified Description A use-after-free issue exists in the Click-to-Run C2R service. A use-after-free occurs when an application continues to use a pointer after it h...
Microsoft Office ClickToRun 资源管理错误漏洞
Microsoft Office ClickToRun is a component developed by Microsoft Corporation that allows for the download and installation of Microsoft Office products. There is a resource management vulnerability in Microsoft Office ClickToRun. Attackers can exploit this vulnerability to gain higher privileges...
The vulnerability of the Click-to-Run package technology for Microsoft Office and Office 365 allows attackers to enhance their privileges.
The vulnerability of the Click-to-Run package technology for Microsoft Office and Office 365 is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise allows a perpetrator to enhance their privileges.
The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise allows a perpetrator to enhance their privileges.
The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise is related to the use of memory after it is released. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise allows a perpetrator to enhance their privileges.
The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise is related to the use of memory after it is released. Exploiting this vulnerability can allow attackers to increase their privileges...
Security Updates for Microsoft Office Products C2R (May 2026)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-40358 - Heap-based buffer overflow in Microsoft Office allows an unauthorized...