CVE-2026-45453: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-44824: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-44823: Numeric Truncation Error

Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-44821: Out-of-bounds Read

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

CVE-2026-44820: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-44818: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-44817: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-42902: Improper Authorization

Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...

CVE-2026-45483: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office Project Server allows an authorized attacker to perform spoofing over a network...

CVE-2026-45485: Out-of-bounds Read

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

CVE-2026-45486: Use After Free

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-45479: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-45474: Use After Free

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-45471: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-45475: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-45468: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-45469: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-41108: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally...

Microsoft Office 缓冲区错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. Microsoft Office has a buffer overflow vulnerability, which stems from out-of-bounds reading,...

Microsoft Office Sharepoint Server 输入验证错误漏洞

Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. There is a injection vulnerability present in Microsoft Office SharePoint. Attackers exploit this vulnerability to execute cross-site scripting attacks. The...