152827 matches found
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to the misuse of an unreliable pointer, allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...
The vulnerability of the Tab Hover Cards component in Google Chrome and Microsoft Edge browsers allows a hacker to perform domain substitution attacks.
The vulnerability of the Tab Hover Cards component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace a domain name using a created domain name...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of Microsoft Exchange Server servers stems from the lack of protective measures for website structures, allowing attackers to carry out spear-phishing attacks.
The vulnerability of Microsoft Exchange Server servers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the TabGroups function in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user interface.
The vulnerability of the TabGroups function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to replace the user interface through malicious network traffic...
NULL Pointer Dereference in CRMF EncryptedValue Decryption
...
Possible NULL Dereference in Password-Based CMS Decryption
...
Out-of-Bounds Read in CMS Password-Based Decryption
...
Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
...
Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
...
Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
...
Heap Use-After-Free in the PKCS7_verify() Function
...
AES-OCB IV Ignored on EVP_Cipher() Path
...
Vim: Arbitrary Code Execution via Python Omni-Completion
...
Vim: Out-of-bounds Read in Terminal Screen Snapshot
...
OESA-2026-2614 catdoc security update
catdoc is program which reads one or more Microsoft word files and outputs text, contained insinde them to standard output. Therefore it does same work for.doc files, as unix cat command for plain ASCII files. It is now accompanied by xls2csv - program which converts Excel spreadsheet into...
SUSE CVE-2026-8863
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the...
Security Updates for Microsoft Dynamics 365 (on-premises) (June 2026)
The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by a vulnerability: - Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 on-premises allows an authorized attacker to elevate privileges over a network. CVE-2026-4037...