9733 matches found
CVE-2026-59236: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key CWE-639 in the Excel import handlers CustomerImport, LeadImport, ProductImport in Roskus Prospero Flow CRM before 5.14.0 allows a remote, authenticated user of any role or company to create customer, lead, and product records inside another company...
Microsoft Office Excel stack buffer overflow vulnerability (CNVD-2026-29407)
Microsoft Office Excel is a spreadsheet processing software within the Microsoft Office suite, primarily used for data organization, analysis, and visualization. Microsoft Office Excel has a stack buffer overflow vulnerability, which stems from improper handling of memory operations. Attackers ca...
Microsoft Excel code execution vulnerability (CNVD-2026-28559)
Microsoft Excel is a spreadsheet software within the Office suite developed by the American company Microsoft. There is a code execution vulnerability in Microsoft Excel, and attackers can exploit this vulnerability to execute arbitrary code...
Microsoft Excel heap buffer overflow vulnerability (CNVD-2026-31553)
Microsoft Excel is a spreadsheet processing component within the Microsoft Office suite, primarily used for data calculation, analysis, and visualization. Microsoft Excel has a heap buffer overflow vulnerability, which stems from improper handling of certain data, leading to out-of-bound writes t...
Microsoft Office Excel buffer overflow vulnerability (CNVD-2026-29412)
Microsoft Office Excel is a spreadsheet processing software in the Microsoft Office suite. It supports data calculation, chart analysis, and macro functions. There is a buffer overflow vulnerability in Microsoft Office Excel. This vulnerability stems from the improper handling of boundary...
Security Updates for Microsoft Office Products (July 2026) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the july-14-2026 advisory. - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-55045 - Stack-based buffer overflow i...
Microsoft Excel heap buffer overflow vulnerability (CNVD-2026-29406)
Microsoft Office Excel is a spreadsheet processing software in the Microsoft Office suite, primarily used for data organization, calculation, and chart analysis. Microsoft Office Excel has a heap buffer overflow vulnerability. This vulnerability stems from an inability to correctly validate the...
The vulnerability of Microsoft Excel’s spreadsheet editor, related to reading data outside of the allowed range in memory, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Excel spreadsheet editors involves reading data beyond the acceptable range in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created file...
CVE-2026-50124: Unrestricted Upload of File with Dangerous Type
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase can be exploited by uploading payload.zip through the Excel upload API /datasource/upload, creating an H2 datasource that uses the zip: protocol, and executing an SQL dataset path where...
EUVD-2026-43774
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-44040
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-44041
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-44039
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
EUVD-2026-44038
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
EUVD-2026-44037
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-55947
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-55949
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-56156
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...