145219 matches found
CVE-2026-50678
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-49166
Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-48581
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally...
CVE-2026-48561
Improper neutralization of special elements used in a command 'command injection' in Copilot Chat Microsoft Edge allows an unauthorized attacker to execute code over a network...
CVE-2026-55121
CVE-2026-55121 corresponds to an out-of-bounds read in Microsoft Office that enables an unauthenticated or authorized local attacker to disclose information. The public descriptions across NVD/MSRC and EUVD notes indicate the vulnerability affects Microsoft Office components and results in local ...
CVE-2026-55121 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-55121 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-58617 M365 Copilot for iOS Elevation of Privilege Vulnerability
...
CVE-2026-58617 M365 Copilot for iOS Elevation of Privilege Vulnerability
...
CVE-2026-58541
CVE-2026-58541 — Windows DWM Core Library Elevation of Privilege due to a type confusion in DWM. Affected component: Windows DWM Core Library/DWM (Windows OS). Description from sources: Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to e...
CVE-2026-58541 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-58537 Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability
...
CVE-2026-58537 Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability
...
CVE-2026-58277
CVE-2026-58277 is a Microsoft SharePoint elevation-of-privilege vulnerability (Office SharePoint). The entry cites improper authorization that lets an authenticated attacker elevate privileges over the network. CVSS 3.1 base score 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and ...
CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-58277 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-57087
CVE-2026-57087 is a Windows Media Foundation remote code execution vulnerability caused by a heap-based buffer overflow in Windows Media Foundation. An unauthenticated attacker could trigger code execution over a network. Public sources confirm the flaw affects Windows Media/Media Foundation comp...
CVE-2026-57087 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
...