6009 matches found
Security Updates for Microsoft Office Products C2R (July 2026)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-55045 - Use after free in Microsoft Office allows an unauthorized attacker...
CVE-2026-9046
CVE-2026-9046 describes an insecure-permissions issue affecting Windows deployments of Legion Zone and Lenovo App Store (Chinese market). When installed on a non-system partition, a local user could potentially execute arbitrary code due to insufficient access controls. The vulnerability is class...
EUVD-2026-44975
A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...
USN-8554-1: NTFS-3G vulnerabilities
It was discovered that NTFS-3G had a heap buffer overflow when reading certain NTFS images. A local attacker could possibly use this issue to execute arbitrary code. CVE-2026-42616 It was discovered that NTFS-3G had multiple heap buffer overflows when processing certain NTFS images. A local...
PT-2026-60521
Name of the Vulnerable Software and Affected Versions Legion Zone affected versions not specified Lenovo App Store affected versions not specified Description Insecure permissions in the Legion Zone and Lenovo App Store Windows applications, distributed exclusively in the Chinese market, may allo...
Microsoft Excel heap buffer overflow vulnerability (CNVD-2026-29406)
Microsoft Office Excel is a spreadsheet processing software in the Microsoft Office suite, primarily used for data organization, calculation, and chart analysis. Microsoft Office Excel has a heap buffer overflow vulnerability. This vulnerability stems from an inability to correctly validate the...
Microsoft Office Excel heap buffer overflow vulnerability (CNVD-2026-29405)
Microsoft Office Excel is a spreadsheet processing software in the Microsoft Office suite. It primarily provides functions such as data calculation, chart analysis, and table management. There is a heap buffer overflow vulnerability in Microsoft Office Excel. This vulnerability occurs due to the...
PT-2026-58878
The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer...
Microsoft Office Excel buffer overflow vulnerability (CNVD-2026-29412)
Microsoft Office Excel is a spreadsheet processing software in the Microsoft Office suite. It supports data calculation, chart analysis, and macro functions. There is a buffer overflow vulnerability in Microsoft Office Excel. This vulnerability stems from the improper handling of boundary...
Microsoft Office Word buffer overflow vulnerability (CNVD-2026-29409)
Microsoft Office Word is a word processing application within the Microsoft Office suite, primarily providing features for document editing, formatting, and typesetting. There is a heap buffer overflow vulnerability in Microsoft Office Word. This vulnerability stems from the program’s failure to...
Microsoft Office Excel buffer overflow vulnerability (CNVD-2026-31551)
Microsoft Office Excel is a spreadsheet software developed by the American company Microsoft. Microsoft Office Excel has a buffer error vulnerability, which stems from out-of-bounds reading. Attackers can exploit this vulnerability to execute code locally...
Security Updates for Microsoft Office Products (July 2026) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the july-14-2026 advisory. - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-55045 - Stack-based buffer overflow i...
EUVD-2026-44356
Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally...
CVE-2026-50649
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-50646
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
CVE-2026-50646
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
CVE-2026-24233
NVIDIA TensorRT-LLM for Linux is affected by CVE-2026-24233, involving a vulnerability in the restricted unpickler used for model weight deserialization. A local, unauthenticated attacker could cause deserialization of untrusted data, with potential for code execution, privilege escalation, data ...
CVE-2026-50649
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...
