CVE-2026-63517

CVE-2026-63517 describes an out-of-bounds read in the Microsoft Office Graphics Component that allows a local attacker to disclose information. The affected software is Microsoft Office (Graphics Component). Root cause: out-of-bounds read. Impact: confidentiality impact High; attacker needs local...

CVE-2026-63517 Microsoft Office Graphics Component Information Disclosure Vulnerability

...

CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability

...

CVE-2026-63513

CVE-2026-63513 affects Microsoft Office (Graphics Component) via a heap-based buffer overflow that enables local code execution. The CVE is described as a Heap-based buffer overflow in Microsoft Office allowing an unauthorized attacker to execute code locally. CVSS 3.1 indicates LOCAL attack vect...

CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability

...

CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2026-62910

CVE-2026-62910 affects Microsoft Exchange Server and stems from improper control of resource identifiers (resource injection). According to the available documents, the issue allows an authorized attacker to elevate privileges over a network, with CVSS v3.1 base metrics: Network attack vector, Lo...

CVE-2026-62740

CVE-2026-62740 describes a vulnerability in the Windows Imaging Component where an uninitialized resource can lead to local information disclosure by an authorized attacker. The issue is reported with a CVSS v3.1 base score of 5.5 (Medium), vector: Local, low attack complexity, and low privileges...

CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability

...

CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability

...

EUVD-2026-56364

Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally...

CVE-2026-54984

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally...

CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability

...

CVE-2026-54984

Windows Imaging Component contains a heap-based buffer overflow that allows an unauthenticated user with local access to execute arbitrary code. This CVE-2026-54984 is described as a local, high-severity issue (CVSS 7.8). The documents provide no exploit details or remediation guidance; refer to ...

EUVD-2026-56301

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally...

CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability

...

CVE-2026-62827 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-68335

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS component. The RDS component incorrectly handles incoming messages that cross network namespace boundaries, allowing a sender in one network namespace to deliver a message to a socket in a different network namespace. This can...

GHSA-H784-HPJP-2RRM Duplicate Advisory: Craft CMS: Authenticated RCE through Twig sandbox escape

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f5wm-88jv-g5hx. This link is maintained to preserve external references. Original Description Craft CMS versions = 5.0.0-RC1 before 5.10.7 and = 4.0.0-RC1 before 4.18.3 contain a remote code execution...

CVE-2026-19167

A flaw was found in Google Chrome. An integer overflow vulnerability in the Graphics Processing Unit GPU component could allow a remote attacker, who has already compromised the renderer process, to leak sensitive cross-origin data. This exploitation is possible by enticing a user to visit a...