CVE-2026-16999: Improper Restriction of XML External Entity Reference

Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17...

PT-2026-71241

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description In publish mode, when the Publish.Auth.Enable variable is set to false, the software fails to enforce publish-access filters on five filetree path-resolution endpoints: 'getFullHPathByID',...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the parsing process. An attacker can gain unauthorized access to sensitive information by submitting a specially crafted document that triggers the inclusion of functionality from an untrusted contro...

USN-8627-1 yelp vulnerability

It was discovered that Yelp incorrectly handled certain crafted help documents due to an overly permissive Content Security Policy. An attacker could trick a user into opening a specially crafted document, possibly resulting in the disclosure of sensitive information...

CVE-2026-18693

An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server...

CVE-2026-64915 Microsoft Office Word Remote Code Execution Vulnerability

...

CVE-2026-63525 Microsoft Office Word Remote Code Execution Vulnerability

...

CVE-2026-70322

CVE-2026-70322 affects Microsoft Office PowerPoint. Cause: improper input validation in PowerPoint leading to local information disclosure when exploited by a local user with no privileges required. CVSS 3.1 base score 5.5 (MEDIUM); attack vector LOCAL, user interaction REQUIRED, confidentiality ...

CVE-2026-70310 Microsoft Word Information Disclosure Vulnerability

...

CVE-2026-68809 Powerpoint Information Disclosure Vulnerability

...

CVE-2026-65656

CVE-2026-65656 concerns a Microsoft Office vulnerability where improper neutralization of special elements used in a command (command injection) can let an attacker with local access execute code locally. The issue is described as a local, user-interaction-requiring flaw with a CVSS v3.1 base sco...

CVE-2026-65657

Microsoft Office contains a use-after-free vulnerability (CVE-2026-65657) that allows a local attacker to execute code on the affected host. CVSS v3.1 base score 7.8 (HIGH), attack vector LOCAL, attack complexity LOW, privileges required NONE, user interaction REQUIRED, and impact HIGH for confid...

EUVD-2026-56014

An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent Parse cloud function. The function accepts viewer identity and IP address as caller-supplied parameters without...

CVE-2026-58235

SAP NetWeaver Application Server Java Adobe Document Service uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected...

CVE-2026-58235 Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services)

SAP NetWeaver Application Server Java Adobe Document Service uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected...

CVE-2026-58235

CVE-2026-58235 affects SAP NetWeaver Application Server Java (Adobe Document Service). The issue arises from use of outdated third-party cryptographic and data transfer libraries that have known weaknesses and were addressed in later versions. A low-privileged authenticated attacker could potenti...

EUVD-2026-55867

SAP NetWeaver Application Server Java Adobe Document Service uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected...

CVE-2026-58235: Dependency on Vulnerable Third-Party Component

SAP NetWeaver Application Server Java Adobe Document Service uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected...

PT-2026-70119

An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent Parse cloud function. The function accepts viewer identity and IP address as caller-supplied parameters without...

PT-2026-70027

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java Adobe Document Service affected versions not specified Description The Adobe Document Service component uses outdated open source cryptographic and data transfer libraries. A low-privileged authenticated...