CVE-2026-88150

A use of uninitialized resource vulnerability in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this issue; users are recommended to in...

CVE-2026-83891

A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability stems from improper input validation and can result in arbitrary code execution within the victim's context. To successfully exploit this, an attacker...

CVE-2026-88145

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. This vulnerability is caused by underlying issues in how the application handles memory, potentially leading to a complete compromise of the victim's conte...

CVE-2026-88155

A heap-based buffer overflow exists in Microsoft Office SharePoint , which allows an authorized attacker to achieve arbitrary code execution over a network. The vulnerability has a CVSS v3.1 base score of 8.80 (High). Microsoft has released security updates to address this vulnerability; users ar...

CVE-2026-70301

A heap-based buffer overflow exists in Microsoft Office Word , which could allow an unauthorized attacker to execute arbitrary code over a network. To successfully exploit this vulnerability, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft has...

CVE-2026-70300

A Remote Code Execution (RCE) vulnerability exists in Microsoft Office Word due to an untrusted pointer dereference . An unauthorized attacker can exploit this flaw to execute arbitrary code over a network. Microsoft has released security updates to address this vulnerability, and users are encou...

CVE-2024-4040

CVE-2024-4040 A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform...

CVE-2026-70291

A heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a CRITICAL severity score of 9.8 . To exploit these types of vulnerabilities, an attacker typically tricks a victim into opening a ...

CVE-2026-70302

A heap-based buffer overflow vulnerability in Microsoft Office Word allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS v3.1 base score of 8.8 (High) . An attacker could potentially exploit this to perform remote code execution, though specific e...

CVE-2026-70282

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Mic...

CVE-2026-70256

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact of this vulnerability is rated as HIGH with a CVSS score of 8.8 . Microsoft has released updates to address this i...

CVE-2026-70257

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to execute arbitrary code over a network. The underlying cause involves a heap-based buffer overflow and an integer overflow or wraparound (CWE-122, CWE-190). Impacted system...

CVE-2026-70267

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform remote code execution over a network. The root cause is the inclusion of functionality from untrusted control sphere (CWE-829). This issue has a CVSS v3.1 score of 7.2 (High) , impacting confidentiality, integ...

CVE-2026-70268

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker must typically trick a victim into opening a malicious file or clicking a malicious link. Microsoft has re...

CVE-2026-70220

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution locally. To successfully exploit this vulnerability, an attacker must trick the victim into opening a malicious file or clicking a malicious link. Microsoft has released updat...

CVE-2026-70287

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability carries a CVSS v3.1 score of 8.8 (High) , indicating that an attacker could exploit this to execute code with high impact on confidentiality,...

CVE-2026-70269

A heap-based buffer overflow vulnerability in Microsoft Office Word allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is associated with CWE-122 and CWE-190 . Microsoft has released official updates to address this flaw. Users are recommended...

CVE-2026-70197

A vulnerability in .NET allows an unauthorized attacker to perform an out-of-bounds write , which can result in the execution of arbitrary code over a network. This issue is identified with a CVSS v3.1 score of 8.1 (High). While the documents confirm the vulnerability and its potential impact, sp...

CVE-2026-70147

A heap-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with a CRITICAL CVSS v3.1 score of 9.80 , indicating high impact on confidentia...

CVE-2026-70174

The .NET runtime is vulnerable to a Remote Code Execution (RCE) flaw due to an improperly implemented security check for standard . An unauthorized attacker can exploit this vulnerability over a network to execute arbitrary code. The vulnerability has a CVSS score of 8.80 and is categorized under...