72357 matches found
CVE-2026-56643 DirectX Graphics Kernel Elevation of Privilege Vulnerability
...
CVE-2026-56190 Remote Desktop Protocol Remote Code Execution Vulnerability
...
CVE-2026-56176 Windows Win32k Elevation of Privilege Vulnerability
...
CVE-2026-56157
Summary: CVE-2026-56157 is described as an improper access-control vulnerability in Microsoft Office SharePoint that could enable an authorized attacker to spoof over a network. The connected documents consistently identify SharePoint (Office suite) as affected and describe the impact as spoofing...
CVE-2026-56156 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-55145 Outlook Copilot Tampering Vulnerability
...
CVE-2026-55131 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-55131
Root cause: a heap-based buffer overflow in Microsoft Office Excel (part of Microsoft Office) allows an attacker to execute code locally. Affected: Excel; vulnerability appears to enable local code execution upon exploitation of the overflow. CVSSv3.1 metrics indicate Local access, No privileges ...
CVE-2026-55055
CVE-2026-55055 is a stack-based buffer overflow in Microsoft Word (part of Microsoft Office) that enables a local attacker to execute code. The vulnerability affects Word components and is documented with a CVSS 3.1 base score of 7.8 (High) with Local attack vector, user interaction required, and...
CVE-2026-55136
CVE-2026-55136 affects Microsoft Excel (part of Microsoft Office). The vulnerability is caused by an untrusted pointer dereference in Excel, enabling a local attacker to execute code on the affected system. CVSS 3.1 base score 7.8 (HIGH) with local access, no privileges required, user interaction...
CVE-2026-55024
CVE-2026-55024 – Microsoft Excel remote code execution . The vulnerability is described as an access of resource using incompatible type (type confusion) in Microsoft Office Excel, enabling an unauthorized attacker to execute code locally. Connected advisories (NCSC, ZDI, ENISA ENISA-style) indic...
CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
...
CVE-2026-50491
The CVE-2026-50491 entry documents an out-of-bounds read in the Code Integrity DLL (ci.dll) that enables an authorized local attacker to achieve Elevation of Privileges. Affected component: Windows Code Integrity mechanism (ci.dll). Root cause: out-of-bounds read in ci.dll leading to privilege es...
CVE-2026-50406 Windows Backup Engine Elevation of Privilege Vulnerability
...
CVE-2026-50427
CVE-2026-50427 affects Content Delivery Manager. Description: use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. CVSS v3.1: 7.8 (Local, Low user interaction, Privilege Escalation, high impact on confidentiality, integrity, availability). Connected sourc...
CVE-2026-50371 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability
...
CVE-2026-50327
CVE-2026-50327 is a heap-based buffer overflow in Windows Media that could allow an authorized attacker to execute code locally. Affected components are Windows Media/Windows Media Foundation. The root cause is a heap-based buffer overflow. Mitigation: apply the Microsoft security updates; the CV...