Lucene search
+L

8445 matches found

Cvelist
Cvelist
added 2026/03/19 8:55 p.m.30 views

CVE-2026-32622 SQLBot: Remote Code Execution via Terminology Poisoning

SQLBot is an intelligent data query system based on a large language model and RAG. Versions 1.5.0 and below contain a Stored Prompt Injection vulnerability that chains three flaws: a missing permission check on the Excel upload API allowing any authenticated user to upload malicious terminology,...

8.6CVSS0.00562EPSS
SaveExploits1References2
CNVD
CNVD
added 2026/03/17 12:0 a.m.15 views

Microsoft Excel Code Execution Vulnerability (CNVD-2026-14408)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute code...

7.8CVSS6.4AI score0.00435EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/03/17 12:0 a.m.11 views

Microsoft Excel Code Execution Vulnerability (CNVD-2026-16156)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute code...

8.4CVSS6.3AI score0.00416EPSS
SaveExploits0
CNVD
CNVD
added 2026/03/17 12:0 a.m.14 views

Microsoft Excel Code Execution Vulnerability (CNVD-2026-16152)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

7.8CVSS6.5AI score0.00493EPSS
SaveExploits0
CNVD
CNVD
added 2026/03/17 12:0 a.m.14 views

Microsoft Excel Code Execution Vulnerability (CNVD-2026-16153)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute code...

7.8CVSS6.3AI score0.00458EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2026/03/12 12:0 a.m.13 views

KLA90936 OSI vulnerability in Microsoft Office

An information disclosure vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2026-26133 Exploitation Related products Microsoft-Outlook Microsoft-Excel Microsoft-Word CVE list CVE-2026-26133 high...

7.1CVSS5.7AI score0.00433EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/03/12 12:0 a.m.18 views

Microsoft多款产品 安全漏洞

Microsoft Excel is a product of the American company Microsoft. Microsoft Excel is a spreadsheet processing software within the Office suite. Microsoft Edge is a web browser that comes with systems running Windows 10 and later versions. Microsoft Word is a word processing software within the Offi...

7.1CVSS5.8AI score0.00433EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/03/11 12:0 a.m.10 views

Microsoft Excel Information Disclosure Vulnerability (CNVD-2026-16157)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information leakage vulnerability exists in Microsoft Excel, which can be exploited by attackers to obtain sensitive information...

7.5CVSS6AI score0.01215EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.12 views

PT-2026-24662

Name of the Vulnerable Software and Affected Versions mlflow/mlflow versions prior to 3.10.0 Description An unauthenticated remote attacker can read arbitrary files from the server's filesystem. The issue occurs in the create model version handler of mlflow/server/handlers.py when a...

7.5CVSS7.3AI score0.02355EPSS
SaveExploits1References20
Tenable Nessus
Tenable Nessus
added 2026/03/11 12:0 a.m.21 views

Security Updates for Microsoft Office Products (March 2026) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the march-10-2026 advisory. - Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-26113 - Use after free in...

8.4CVSS6.2AI score0.00543EPSS
SaveExploits0References7
Talos Blog
Talos Blog
added 2026/03/10 10:23 p.m.11 views

Microsoft Patch Tuesday for March 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for March 2026 which includes 79 vulnerabilities, including three that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the three "critical" vulnerabilitie...

8.8CVSS6.4AI score0.04671EPSS
SaveExploits8
EUVD
EUVD
added 2026/03/10 6:31 p.m.10 views

EUVD-2026-10673

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS6.2AI score0.00493EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.10 views

EUVD-2026-10672

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS5.9AI score0.00435EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.9 views

EUVD-2026-10678

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS5.9AI score0.00458EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.8 views

EUVD-2026-10701

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.7AI score0.01215EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.8 views

EUVD-2026-10674

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS6.2AI score0.00493EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.11 views

EUVD-2026-10671

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS5.9AI score0.00435EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.8 views

EUVD-2026-10675

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

8.4CVSS5.9AI score0.00416EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/10 6:18 p.m.6 views

CVE-2026-26144

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

7.5CVSS0.01215EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/10 6:18 p.m.8 views

CVE-2026-26112

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS5.9AI score0.00458EPSS
SaveExploits0References1
Rows per page
Query Builder