146630 matches found
CVE-2026-68792 Microsoft Office Elevation of Privilege Vulnerability
...
EUVD-2026-56451
Improper neutralization of special elements used in a command 'command injection' in Microsoft Office allows an authorized attacker to elevate privileges locally...
CVE-2026-68792
CVE-2026-68792 concerns a Microsoft Office command-injection vulnerability (improper neutralization of special elements used in a command) that allows an authorized, local attacker with low privileges and no user interaction to achieve local privilege elevation. Impacted aspects: confidentiality,...
CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
CVE-2026-65815
CVE-2026-65815 affects Microsoft Dynamics 365 On-Premises. The vulnerability arises from deserialization of untrusted data, enabling an authenticated attacker to execute code remotely over a network. Affected component is the on-premises Dynamics 365 deployment; the underlying root cause is impro...
EUVD-2026-56449
Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...
CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
EUVD-2026-56447
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-65813
SSRF in Microsoft Exchange Server lets an authenticated attacker escalate privileges over the network. NVD scores it HIGH (CVSS 8.8), while Microsoft's CNA rates it MEDIUM (6.5) with confidentiality impact only. Microsoft has released fixes: KB5121573 (Exchange Server Subscription Edition RTM), K...
CVE-2026-65807 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-65807
Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
EUVD-2026-56445
Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-65807 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-65811
CVE-2026-65811 : This entry concerns Power BI with an issue described as improper input validation that allows an authorized attacker to execute code over a network. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 8.8 (HIGH). Affected component and root cause are stated onl...
CVE-2026-65807
Microsoft Excel is affected by CVE-2026-65807 due to a type confusion in resource access, allowing remote code execution over a network. The vulnerability arises from incompatible type handling in a resource access path within Excel, impacting users of Microsoft Office Excel. The CVSS 3.1 base sc...
CVE-2026-65662 Windows GDI Information Disclosure Vulnerability
...
CVE-2026-65664
This CVE describes a heap-based buffer overflow in Microsoft Office that allows a local attacker to execute code. The available documents mention the vulnerability as a local code execution issue, but do not provide detailed affected versions, root cause analysis beyond the heap overflow, or reme...
CVE-2026-65665
CVE-2026-65665 involves deserialization of untrusted data in Microsoft Office SharePoint Server, enabling an authorized attacker to execute code remotely over the network. NVD records show a CVSSv3.1 base score of 8.8 (High), with network access, low attack complexity, privileges required: Low, a...