Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Windows Hyper-V Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally...

GHSA-P4H8-56QP-HPGV SSH/SCP option injection allowing local RCE in @aiondadotcom/mcp-ssh

Impact A crafted hostAlias argument such as -oProxyCommand=... was passed to ssh/scp without an argument terminator. SSH interprets arguments starting with - as options regardless of position, so the option-injection caused SSH to execute the attacker-supplied ProxyCommand locally on the machine...

PT-2026-32736

CVE-2026-26156 Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally. https://t.co/WXiQEpBjLe...

PT-2026-32841

Name of the Vulnerable Software and Affected Versions Windows Snipping Tool affected versions not specified Description Improper neutralization of special elements used in a command allows an unauthorized attacker to execute arbitrary code locally and remotely, affecting the system. Recommendatio...

PT-2026-32852

CVE-2026-32200 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. https://t.co/8Uy6aw5JNe...

PT-2026-32849

CVE-2026-32197 | Microsoft 365 Apps for Enterprise | Remote Code Execution Description Use-after-free vulnerability in Microsoft Office Excel allows unauth attacker to achieve RCE locally by tricking user into opening malicious Excel file. Severity: High Exploitation: Unknown Public PoC: Unknown...

CVE-2026-32221: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

CVE-2026-32156: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...

CVE-2026-23657: Use After Free

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-32183: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Snipping Tool allows an unauthorized attacker to execute code locally...

CVE-2026-32200: Use After Free

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally...

CVE-2026-32199: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-32197: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-32826

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use after free in the Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute arbitrary code locally and remotely, affecting the system. Use after free i...

PT-2026-32864

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Graphics Component allows an unauthorized attacker to execute arbitrary code locally and remotely, which can affect the...

PT-2026-32819

CVE-2026-32149 Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. https://t.co/jAvCgQ0s60...

PT-2026-32879

Name of the Vulnerable Software and Affected Versions Microsoft 365 Apps for Enterprise versions 16.0.1 through 16.0.1 Description A use-after-free issue in Microsoft Office Word allows an unauthorized attacker to execute code locally. This occurs when a user is tricked into opening a malicious...

PT-2026-32850

CVE-2026-32198 | Microsoft 365 Apps for Enterprise | Remote Code Execution Description Use-after-free vulnerability in Microsoft Office Excel allows unauth attacker to achieve RCE locally by tricking user into opening malicious Excel file. Severity: High Exploitation: Unknown Public PoC: Unknown...

PT-2026-32870

Name of the Vulnerable Software and Affected Versions Microsoft 365 Apps for Enterprise versions 16.0.1 through 16.0.1 Description A use-after-free issue in Microsoft Office Word allows an unauthorized attacker to execute code locally by tricking a user into opening a malicious document...