32 matches found
CVE-2026-100207
Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...
EUVD-2026-44109
Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...
EUVD-2026-44071
Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...
EUVD-2026-44221
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally...
EUVD-2026-44183
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
PT-2026-58280
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally...
PT-2026-58165
Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow exists in the Windows Resilient File System ReFS. A heap-based buffer overflow occurs when a program writes more data to a heap memory...
PT-2026-58536
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
PT-2026-58311
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-45463
Integer underflow wrap or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-44818
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
PT-2026-47945
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an unauthorized attacker to execute code locally within Microsoft Outlook and Word...
PT-2026-48009
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow allows an unauthorized attacker to execute arbitrary code locally and remotely, affecting the system. A heap-based buffer overflow occurs when an...
CVE-2026-41611
Improper neutralization of script-related html tags in a web page basic xss in Visual Studio Code allows an unauthorized attacker to execute code locally...
EUVD-2026-22581
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
PT-2026-32851
CVE-2026-32199 | Microsoft 365 Apps for Enterprise | Remote Code Execution Description Use-after-free vulnerability in Microsoft Office Excel allows unauth attacker to achieve RCE locally by tricking user into opening malicious Excel file. Severity: High Exploitation: Unknown Public PoC: Unknown...
EUVD-2026-10678
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
