10123 matches found
Security Updates for Microsoft Office Products (April 2026) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the april-14-2026 advisory. - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-33095, CVE-2026-33115 - Out-of-boun...
CVE-2026-39424
MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, the chat export feature is vulnerable to Improper Neutralization of Formula Elements in a CSV File. When an administrator exports the application chat history to an Excel file .xlsx via the...
ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year-Old Excel RCE and 15 More Stories
You know that feeling when you open your feed on a Thursday morning and it's just... a lot? Yeah. This week delivered. We've got hackers getting creative in ways that are almost impressive if you ignore the whole "crime" part, ancient vulnerabilities somehow still ruining people's days, and enoug...
CVE-2026-41034
ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion via pictFmla.cbBufInCtlStm and other vectors, leading to an information leak and ASLR bypass...
CVE-2026-41034
ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion via pictFmla.cbBufInCtlStm and other vectors, leading to an information leak and ASLR bypass...
CVE-2026-41034
ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion via pictFmla.cbBufInCtlStm and other vectors, leading to an information leak and ASLR bypass...
Microsoft Excel Spreadsheet Editor Information Disclosure
The vulnerability of Microsoft Excel spreadsheet editors involves reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
DocumentServer security vulnerabilities
DocumentServer is an open-source online collaboration suite developed by ONLYOFFICE. It supports real-time collaborative editing of documents, spreadsheets, presentations, and other formats. Versions of DocumentServer prior to 9.3.0 contained security vulnerabilities. These vulnerabilities stemme...
PT-2026-33272
ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion via pictFmla.cbBufInCtlStm and other vectors, leading to an information leak and ASLR bypass...
CVE-2026-32198
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-32199
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-32189
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-32197
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-32188
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Microsoft Office Memory Use Code Execution
The vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft Excel spreadsheet editors is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Excel Code Execution
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Microsoft Excel Memory Use After Free
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
