146768 matches found
CVE-2026-45646 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability
...
CVE-2026-48581
CVE-2026-48581 affects Microsoft Surface. It describes insufficient granularity of access control enabling a locally authenticated attacker to escalate privileges (Impact: high; CVSS 3.1 base 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected records show the vulnerability in Surface Broker SDM...
CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability
...
CVE-2026-58644
CVE-2026-58644 – Microsoft SharePoint Deserialization of Untrusted Data (Server) involves a deserialization flaw in SharePoint Server that allows an unauthenticated attacker to execute arbitrary code over a network. The vulnerability affects Microsoft Office SharePoint/SharePoint Server component...
CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-58636 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-58636 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-58618
CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...
CVE-2026-58618 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-58618 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-58610 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
...
CVE-2026-58609
The CVE-2026-58609 entry describes an Out-of-bounds read in the Microsoft Graphics Component that enables local execution of code by an unauthenticated attacker with user interaction. The vulnerability is linked to a local attack vector with high impact to confidentiality, integrity, and availabi...
CVE-2026-58595
CVE-2026-58595 concerns the Microsoft Bing App for iOS, where an improper restriction of rendered UI layers or frames enables an unauthorized attacker to spoof over a network. The vulnerability affects the Bing iOS app’s UI rendering stack (specific component not detailed in the provided document...
CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-50522
CVE-2026-50522 is a deserialization flaw in Microsoft Office SharePoint that enables remote code execution over a network. Affected products include on‑premises SharePoint Server variants (Server 2016/2019, Subscription Edition, Enterprise Server). The root cause is deserialization of untrusted d...
CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability
...
CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability
...