148012 matches found
CVE-2026-45500 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-45500
CVE-2026-45500: A cross-site scripting issue in Microsoft Exchange Server arises from improper neutralization of input during web page generation. This vulnerability could enable an unauthorized attacker to perform spoofing over the network. Documents identify Microsoft Exchange Server as affecte...
CVE-2026-45500 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-45466 Microsoft Word Information Disclosure Vulnerability
...
CVE-2026-45466
CVE-2026-45466 : Heap-based buffer overflow in Microsoft Word can allow a local attacker to disclose information. Affected product: Microsoft Word (Office). Vulnerability type: heap-based overflow in Word’s handling of content. Impact: confidentiality leakage (low), local access required with use...
CVE-2026-45466 Microsoft Word Information Disclosure Vulnerability
...
CVE-2026-45466
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-45461 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-45461 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-45461
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-45461
CVE-2026-45461 describes a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. Documents confirm the vulnerability exists in Microsoft Office and indicate a local attack vector with high impact (C: HIGH, I: HIGH, A: HIGH) and a base score o...
CVE-2026-45460
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-45460
CVE-2026-45460 is an information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read in a Microsoft Office component. It allows a local, unauthenticated attacker to disclose information (confidentiality impact). The CVSSv3.1 metrics indicate a Local attack vector, High ex...
CVE-2026-45460 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-45460 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-45458 Microsoft Outlook and Word Remote Code Execution Vulnerability
...
CVE-2026-45458
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-45458
Microsoft Office (including Outlook and Word) is affected by CVE-2026-45458 due to a type-confusion in resource access, enabling local code execution. The vulnerability arises when an incompatible type is accessed, with a local attack vector, no user interaction, and no privileges required. The C...
CVE-2026-45453 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-45456
CVE-2026-45456 affects Microsoft Office apps (notably Outlook and Word) and is caused by a resource access type confusion that can lead to local code execution. The vulnerability allows an authenticated, local attacker to run arbitrary code without user interaction, with high impact on confidenti...