Lucene search
+L

159226 matches found

CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•28 views

Microsoft Office 缓冲区错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. Microsoft Office has a buffer overflow vulnerability, which stems from out-of-bounds reading,...

3.3CVSS7.3AI score0.00559EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/06/09 12:00 a.m.•18 views

The vulnerability of the Payments component in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user interface.

The vulnerability of the Payments component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface...

7.8CVSS6.9AI score0.00217EPSS
SaveExploits0References7Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•2 views

CVE-2026-45474: Use After Free

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

8.4CVSS8.2AI score0.00364EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•27 views

PT-2026-47959

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. A heap-based buffer overflow...

8.4CVSS6.5AI score0.00364EPSS
SaveExploits0References7
Kaspersky
Kaspersky
•added 2026/06/09 12:00 a.m.•102 views

KLA91093 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing...

8.8CVSS7.7AI score0.0152EPSS
SaveExploits0References66
Kaspersky
Kaspersky
•added 2026/06/09 12:00 a.m.•10 views

KLA91091 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

9.6CVSS6.4AI score0.01138EPSS
SaveExploits0References119
Kaspersky
Kaspersky
•added 2026/06/09 12:00 a.m.•5 views

KLA91089 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure...

9.8CVSS7AI score0.00974EPSS
SaveExploits0References6
Kaspersky
Kaspersky
•added 2026/06/09 12:00 a.m.•10 views

KLA91087 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An...

9.6CVSS6.2AI score0.02444EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•2 views

CVE-2026-47638: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

5.4CVSS6.1AI score0.00583EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•23 views

Microsoft Office Word 缓冲区错误漏洞

Microsoft Office Word is a word processing software developed by Microsoft and open sourced. There are security vulnerabilities in Microsoft Office Word. Attackers can exploit these vulnerabilities to execute code. The following products and versions are affected: Microsoft 365 Apps for Enterpris...

7.8CVSS5.8AI score0.00466EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•36 views

Microsoft Office Sharepoint Server 输入验证错误漏洞

Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. There is a injection vulnerability present in Microsoft Office SharePoint. Attackers exploit this vulnerability to execute cross-site scripting attacks. The...

7.3CVSS6.9AI score0.00528EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•26 views

Microsoft Office 缓冲区错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is a security vulnerability in Microsoft Office, which stems from a heap buffer overflow...

7.8CVSS7.4AI score0.00571EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•28 views

Microsoft Office 缓冲区错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There are security vulnerabilities in Microsoft Office. Attackers can exploit these...

7.8CVSS5.8AI score0.00466EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•2 views

CVE-2026-45471: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...

7.8CVSS7.2AI score0.00571EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/09 12:00 a.m.•28 views

Microsoft Office Sharepoint Server 跨站脚本漏洞

Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. Microsoft Office SharePoint has a cross-site scripting vulnerability. Attackers exploit this vulnerability to carry out cross-site scripting attacks. The followi...

7.3CVSS6.9AI score0.00649EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•28 views

PT-2026-47932

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An integer underflow wrap or wraparound occurs in Microsoft Office Excel, which could allow an unauthorized attacker to execute code locally. Recommendations At the moment, the...

7.8CVSS6AI score0.00466EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•28 views

PT-2026-47952

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

5.4CVSS7.1AI score0.00589EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•29 views

PT-2026-47937

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network, which may subsequently affect the system. An out-of-bounds read occurs...

8.2CVSS5.7AI score0.00603EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•21 views

PT-2026-47968

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An untrusted pointer dereference allows an unauthorized attacker to execute code locally. Although the impact is remote, the payload executes on the local machine. Recommendatio...

7.8CVSS5.4AI score0.00466EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•1 views

CVE-2026-42986: Use After Free

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

7.8CVSS7.6AI score0.00333EPSS
SaveExploits0References3
Rows per page
Query Builder