10033 matches found
Security Updates for Microsoft Excel Products C2R (September 2026)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. CVE-2026-78518 - Heap-based buffer overflow in Microsoft Office Excel...
Security Updates for Microsoft Office Online Server (September 2026)
The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2026-81947...
Security Updates for Microsoft Excel Products (September 2026)
The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVE-2026-78512 - Out-of-bounds read in Microsoft Office Excel...
Security Updates for Microsoft Office Products (September 2026)
The Microsoft Office Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network. CVE-2026-64918 - Heap-based buffer overflow in...
GHSA-C7R6-VX3H-W5G2 Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path
Summary Excel::store resolved the destination path against the process working directory rather than the configured filesystem disk. When that path resolved to an existing file, the export was written straight to it with fopen, bypassing the disk entirely. An application that passes a...
External Control of File Name or Path
Overview Affected versions of this package are vulnerable to External Control of File Name or Path via the store process. An attacker can overwrite arbitrary existing files writable by the PHP process with partially controlled content by supplying a crafted export path, potentially leading to...
EUVD-2026-69706
Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path...
Laravel Excel writes exports outside the configured filesystem disk when given a caller-controlled path
Summary Excel::store resolved the destination path against the process working directory rather than the configured filesystem disk. When that path resolved to an existing file, the export was written straight to it with fopen, bypassing the disk entirely. An application that passes a...
CVE-2026-85875
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-81956
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81957
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81958
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-81959
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81960
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81947
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81948
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81949
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81950
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...