9735 matches found
Description of the security update for Excel 2016: February 10, 2026 (KB5002837)
None None...
Description of the security update for Office Online Server: February 10, 2026 (KB5002835)
None None...
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
Microsoft Excel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally...
PT-2026-7360
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
PT-2026-7363
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
PT-2026-7361
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office Excel that could allow an unauthorized attacker to gain elevated privileges on a local system. This issue allows attacke...
Microsoft Excel 安全漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Excel, which can be exploited by an attacker to elevate privileges...
Microsoft Excel 缓冲区错误漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A buffer overflow vulnerability exists in Microsoft Excel. The vulnerability stems from the program's failure to properly validate the length and size of input data, which can be exploited by an attacker ...
KLA90874 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. An information...
Security Updates for Microsoft Office Products (February 2026) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the february-10-2026 advisory. - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-20952 - Untrusted pointer dereference...
Security Updates for Microsoft Office Online Server (February 2026)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerabilities: - Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. CVE-2026-21258 -...
Microsoft Excel 缓冲区错误漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A buffer overflow vulnerability exists in Microsoft Excel. The vulnerability stems from the program's failure to properly validate the length and size of input data, which can be exploited by an attacker ...
CVE-2026-21258: Improper Input Validation
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-21259: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally...
CVE-2026-21261: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CIC-Trap4Phish: A Unified Multi-Format Dataset for Phishing and Quishing Attachment Detection
Phishing attacks represents one of the primary attack methods which is used by cyber attackers. In many cases, attackers use deceptive emails along with malicious attachments to trick users into giving away sensitive information or installing malware while compromising entire systems. The...
Iran-Linked RedKitten Cyber Campaign Targets Human Rights NGOs and Activists
A Farsi-speaking threat actor aligned with Iranian state interests is suspected to be behind a new campaign targeting non-governmental organizations and individuals involved in documenting recent human rights abuses. The activity, observed by HarfangLab in January 2026, has been codenamed...
CVE-2026-1546
A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...
CVE-2026-1546
CVE-2026-1546 affects jishenghua jshERP up to version 3.6. The vulnerability is an SQL injection in DepotItemMapperEx.getBillItemByParam (file /jshERP-boot/depotItem/importItemExcel) triggered by manipulating the barCodes parameter. It can be exploited remotely and has been publicly disclosed. Re...