CVE-2026-35429

CVE-2026-35429 affects Microsoft Edge for Android (Chromium-based) . The vulnerability is a UI misrepresentation that enables an unauthorized attacker to perform spoofing over a network. The CVSS 3.1 vector shows network attack, low attack complexity, no privileges required, user interaction need...

CVE-2026-42891

CVE-2026-42891 affects Microsoft Edge (Chromium-based) for Android . The issue is a UI misrepresentation that can enable an attacker to perform a spoofing action over a network. Documented impact includes spoofing user interface with potential exposure of sensitive information, aligned with the C...

CVE-2026-42891

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-41107

CVE-2026-41107 describes an information disclosure in Microsoft Edge (Chromium-based) caused by external control of a file name or path. The vulnerability affects Microsoft Edge for Android and the Chromium-based Edge on other platforms. The underlying issue enables an unauthorized attacker to di...

CVE-2026-41107 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-42831

CVE-2026-42831 describes a heap-based buffer overflow in Microsoft Office that allows a local attacker to execute code. The CVSS 3.1 vector indicates local attack with user interaction required, high impact on confidentiality, integrity, and availability. Connected sources confirm the issue but d...

CVE-2026-42831

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-42831 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-42831 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-32185 Microsoft Teams Spoofing Vulnerability

...

CVE-2026-32185

Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally...

CVE-2026-32185 Microsoft Teams Spoofing Vulnerability

...

CVE-2026-32185

CVE-2026-32185 affects Microsoft Teams. The vulnerability description indicates files or directories exposed to external parties can let an unauthorized, locally positioned attacker perform spoofing. CVSS metrics cite Local attack vector, requiring user interaction, with High confidentiality impa...

CVE-2026-41614

Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally...

CVE-2026-41614 M365 Copilot for Desktop Spoofing Vulnerability

...

CVE-2026-41614 M365 Copilot for Desktop Spoofing Vulnerability

...

CVE-2026-41614

CVE-2026-41614 concerns M365 Copilot for Desktop where improper access control enables a local attacker to spoof identities. The available documents identify the affected software (M365 Copilot for Desktop) and the impact as local spoofing due to insufficient access permissions, but do not provid...

CVE-2026-41102

Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally...

CVE-2026-41102 Microsoft PowerPoint for Android Spoofing Vulnerability

...

CVE-2026-41102

CVE-2026-41102 affects Microsoft Office PowerPoint with an improper access control, enabling a locally authenticated attacker to spoof content. Descriptions across sources indicate PowerPoint is the affected component, with the vulnerability enabling spoofing at local scope (attack vector: local;...