145553 matches found
CVE-2026-58618 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-58618
CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...
CVE-2026-58618 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-58610 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
...
CVE-2026-58609
The CVE-2026-58609 entry describes an Out-of-bounds read in the Microsoft Graphics Component that enables local execution of code by an unauthenticated attacker with user interaction. The vulnerability is linked to a local attack vector with high impact to confidentiality, integrity, and availabi...
CVE-2026-58595
CVE-2026-58595 concerns the Microsoft Bing App for iOS, where an improper restriction of rendered UI layers or frames enables an unauthorized attacker to spoof over a network. The vulnerability affects the Bing iOS app’s UI rendering stack (specific component not detailed in the provided document...
CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-50522 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-50522
CVE-2026-50522 is a deserialization flaw in Microsoft Office SharePoint that enables remote code execution over a network. Affected products include on‑premises SharePoint Server variants (Server 2016/2019, Subscription Edition, Enterprise Server). The root cause is deserialization of untrusted d...
CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability
...
CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability
...
CVE-2026-56193 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-56193 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-56193
CVE-2026-56193 describes an out-of-bounds read in Microsoft Office that allows a local attacker to disclose information. The available records indicate a high-severity impact (Confidentiality and Availability) with local access and user interaction required, but no explicit details on affected Of...
CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-56164 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-56164
CVE-2026-56164 is a Microsoft SharePoint Server elevation-of-privilege vulnerability described as missing authentication for a critical function, enabling a remote attacker to elevate privileges over a network. Public advisories indicate widespread Office-related vulnerabilities, with SharePoint ...
CVE-2026-56164
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...