67689 matches found
CVE-2026-59135
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-48445
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not requir...
CVE-2022-50997 Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp
Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...
CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability
...
CVE-2026-64914
CVE-2026-64914 is a heap-based buffer overflow in Microsoft Office Access that enables local code execution. According to the available data, the vulnerability has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, NO privileges required, and user interaction required. Impact is asses...
CVE-2026-64905
CVE-2026-64905 is a Microsoft Office Word vulnerability described as a buffer over-read that could allow an attacker to execute code locally. Affected product: Microsoft Word. Root cause: unspecified in provided documents beyond the buffer over-read description. Impact: arbitrary code execution w...
CVE-2026-64904 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-63526 Microsoft Office Graphics Component Remote Code Execution Vulnerability
...
CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-61352
The CVE-2026-61352 entry describes a race condition in the Remote Desktop Client caused by concurrent execution with improper synchronization on a shared resource. This leads to remote code execution over the network, classified with a high impact (CVSS 3.1: 7.5) and network attack vector, requir...
CVE-2026-70313 Microsoft PowerPoint Remote Code Execution Vulnerability
...
CVE-2026-68793 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-65785
Summary of CVE-2026-65785 : The Windows DHCP Client is affected by a vulnerability described as “Uncontrolled resource consumption,” enabling an unauthenticated attacker on an adjacent network to cause a Denial of Service . The CVSS 3.1 vector indicates: Attack Vector: Adjacent , Attack Complexit...
CVE-2026-65661 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-65657
Microsoft Office contains a use-after-free vulnerability (CVE-2026-65657) that allows a local attacker to execute code on the affected host. CVSS v3.1 base score 7.8 (HIGH), attack vector LOCAL, attack complexity LOW, privileges required NONE, user interaction REQUIRED, and impact HIGH for confid...
CVE-2026-62812 Windows DHCP Server Elevation of Privilege Vulnerability
...