5828 matches found
CVE-2026-81951
CVE-2026-81951 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity, no privileges required, and user interaction required (i.e., a vict...
EUVD-2026-73876
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-73873
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81957
CVE-2026-81957 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized, local attacker to execute code on the system. The attack requires user interaction (e.g., opening a crafted file) but no prior privileges. Microsoft rates the CVSS 3.1 score at 7.8 (HIGH) ...
CVE-2026-81960
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve local code execution . The vulnerability requires user interaction (e.g., opening a malicious file) but no prior privileges. The assigned CVSS 3.1 score is 7.8 (HIGH) with full impact to confidential...
CVE-2026-81389
CVE-2026-81389 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The vulnerability requires user interaction and has a high attack complexity , but no prior privileges are needed. The CVSS 3.1 score is 7.0 (HIGH) with full impa...
EUVD-2026-73855
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-73854
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81947
Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized attacker to execute code locally (CVSS v3.1 score 7.8 HIGH ). The attack requires user interaction (e.g., opening a malicious file) and no prior privileges. Impact spans confidentiality, integrity, and ...
EUVD-2026-73853
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81398
CVE-2026-81398 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning a local attack with low complexity requires user interaction (e.g....
CVE-2026-81353
A heap-based buffer overflow in the HEIF Image Extensions component of the Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally . The vulnerability scores CVSS 7.8 (High) with a local attack vector, low complexity, no required privileges, but user interaction i...
CVE-2026-73017
CVE-2026-73017 is a heap-based buffer overflow in Windows Graphics Kernel that allows a local, authorized attacker to achieve code execution . The vulnerability requires high privileges and high attack complexity , with no user interaction needed. Scope is changed, with high impact on confidentia...
EUVD-2026-73780
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally...
EUVD-2026-73717
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...
EUVD-2026-73697
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally...
CVE-2026-69426
CVE-2026-69426 is a heap-based buffer overflow in the Windows VOLSNAP.SYS driver (part of the Volume Shadow Copy service). An authorized attacker with low privileges can exploit this flaw to achieve local code execution with high impact on confidentiality, integrity, and availability. The vulnera...
CVE-2026-72957
CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...