10122 matches found
CVE-2026-62870 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-62870 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-62870
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-62870
CVE-2026-62870 describes a use-after-free in Microsoft Excel that could allow a remote attacker to execute code over a network. The issue has a high impact (C/H/I/A) with network-based, low-attack-complexity exploitation and requires user interaction. Microsoft has published a security update (KB...
CVE-2026-62870: Use After Free
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
PT-2026-67554
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A use after free issue in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Use after free is a memory corruption flaw that occurs when an...
Microsoft Excel Buffer Overflow
The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2026-59933
PhpSpreadsheet is affected by a memory-exhaustion denial-of-service in the OLERead::read() path when parsing attacker-controlled XLS/OLE metadata. The vulnerability stems from an unguarded sector-chain walk in the OLE reader that can loop indefinitely (self-loop in small-block depot/sector chains...
Honeywell Excel Web Control Login Panel - Detect
Honeywell Excel Web Control login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell Excel Web Control login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Honeywell Excel...
Microsoft Office Information Disclosure
Уязвимость пакетов программ Microsoft Office, Excel и 365 Apps for Enterprise связана с чтением за пределами допустимого диапазона в памяти. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию...
Microsoft Office Excel 365 Apps for Enterprise Code Execution
Уязвимость пакетов программ Microsoft Office, Excel и 365 Apps for Enterprise связана с чтением за пределами допустимого диапазона в памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
GHSA-XH5M-36R6-47M3 PHPSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion
Summary PhpSpreadsheet's OLE reader follows sector chains from attacker-controlled XLS/OLE metadata without detecting cycles or enforcing a maximum chain length. A tiny malformed .xls/OLE file can set the small-block depot sector chain to point back to itself. During normal XLS detection,...
PT-2026-64048
Summary PhpSpreadsheet's OLE reader follows sector chains from attacker-controlled XLS/OLE metadata without detecting cycles or enforcing a maximum chain length. A tiny malformed .xls/OLE file can set the small-block depot sector chain to point back to itself. During normal XLS detection,...
Microsoft Office Code Execution
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in the heap. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Excel Pointer Swap Information Disclosure
The vulnerability of Microsoft Excel editors is related to the use of an unreliable pointer. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...
Microsoft Office Code Execution
The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Excel 365 Apps for Enterprise Code Execution
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Excel 365 Apps for Enterprise Code Execution
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Disclosure Information Disclosure
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...