6233 matches found
CVE-2026-20948: Untrusted Pointer Dereference
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-20953: Use After Free
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
PT-2026-2744
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An issue exists in Microsoft Office where an untrusted search path can allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information...
HTC VIVE Runtime Service 代码问题漏洞
HTC VIVE Runtime Service is a core backend driver from HTC Corporation. A code issue vulnerability exists in HTC VIVE Runtime Service version 1.0.0.4, which stems from the service path being unquoted, and could lead to a local user executing arbitrary code and elevating system privileges...
CVE-2022-50917: Unquoted Search Path or Element
ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path by placing malicious executables in specific file system locations to gain elevated...
PT-2026-2753
🟠 CVE-2026-20953 - High Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. https://t.co/3HYe8zgm3r https://t.co/TZ3AHieY4d...
CVE-2026-20952: Use After Free
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
PT-2026-2404
Name of the Vulnerable Software and Affected Versions BlueSoleilCS version 5.4.277 Description BlueSoleilCS version 5.4.277 has a security issue related to an unquoted service path in its Windows service configuration. This could allow local attackers to execute arbitrary code. The vulnerable pat...
CVE-2026-20946: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-20837: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally...
CVE-2026-20955: Untrusted Pointer Dereference
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
MiracleLinux 7 : firefox-128.11.0-1.0.1.el7.AXS7 (AXSA:2025-9973:18)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-9973:18 advisory. firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details CVE-2025-5267 firefox: thunderbird: Potential...
Security Updates for Microsoft Office Online Server (January 2026)
The Microsoft Office Online Server installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerabilities: - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2026-20950 - Untrusted pointer...
Security Updates for Microsoft Office Products (January 2026) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the january-13-2026 advisory. - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-20952, CVE-2026-20953 - Integer...
MiracleLinux 8 : firefox-128.11.0-1.el8_10.ML.1 (AXSA:2025-9974:19)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-9974:19 advisory. firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details CVE-2025-5267 firefox: thunderbird: Potential...
MiracleLinux 9 : thunderbird-128.11.0-1.el9_6.ML.1 (AXSA:2025-10532:16)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-10532:16 advisory. firefox: thunderbird: Out-of-bounds access when resolving Promise objects CVE-2025-4918 firefox: thunderbird: Out-of-bounds access when optimizing...
ProtonVPN 代码问题漏洞
ProtonVPN is a VPN application from ProtonVPN Open Source. A code issue vulnerability exists in ProtonVPN version 1.26.0, which stems from an unquoted WireGuard service configuration path that could allow a local attacker to execute arbitrary code...
CVE-2005-1632
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...
CVE-2023-43340
Cross-site scripting XSS vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters...