165331 matches found
Microsoft Office Buffer Overflow
The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Buffer Overflow
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Buffer Overflow
The vulnerability of Microsoft Office, Excel, 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to reading data beyond the allowed range in memory. Exploitation of this vulnerability could allow an attacker to execute arbitrary code...
Microsoft Office 365 Apps for Enterprise Buffer Overflow
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Azure CLI Code Execution
The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Office Memory Use Code Execution
The vulnerability of Microsoft Office packages, Word, and 365 Apps for Enterprise lies in the use of memory after it is released. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Microsoft Office Memory Reclamation Code Execution
The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft PowerPoint presentation preparation Code Execution
The vulnerability of the Microsoft PowerPoint presentation preparation program is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Microsoft Authenticator Authentication Bypass
The vulnerability of the Microsoft Authenticator multi-factor authentication application is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...
Microsoft Publisher Code Execution
The vulnerability of Microsoft Publisher software, Microsoft Office packages, and Microsoft 365 Apps for Enterprise is related to deserialization mechanism flaws. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Office Buffer Overflow
The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Graphics Privilege Escalation
The vulnerability of the Microsoft Graphics component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Microsoft Office Buffer Overflow
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Updated erlang package fixes security vulnerabilities
SSH SFTP server denial of service via extended channel data infinite loop. CVE-2026-54886 Plaintext APPLICATIONDATA injected during TLS handshake delivered to client application post-handshake in ssl. CVE-2026-54891 Plug: quadratic-time decoding of nested query/body parameters enables denial of...
MGASA-2026-0457 Updated erlang package fixes security vulnerabilities
SSH SFTP server denial of service via extended channel data infinite loop. CVE-2026-54886 Plaintext APPLICATIONDATA injected during TLS handshake delivered to client application post-handshake in ssl. CVE-2026-54891 Plug: quadratic-time decoding of nested query/body parameters enables denial of...
Exchange Server - Remote Code Execution
Microsoft Exchange Server is vulnerable to a remote code execution vulnerability. This CVE ID is unique from CVE-2021-31196, CVE-2021-31206. id: CVE-2021-34473 info: name: Exchange Server - Remote Code Execution author: arcc,intx0x80,dwisiswant0,r3dg33k severity: critical description: | Microsoft...
CVE-2026-100681
Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability in the Microsoft Teams webhook endpoint that accepts forged Bot Framework activities with arbitrary serviceUrl values. Attackers can submit a crafted POST request to inject an...
CVE-2026-100681 Budibase before 3.45.0 SSRF and OAuth Token Exfiltration via Teams Webhook
Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability in the Microsoft Teams webhook endpoint that accepts forged Bot Framework activities with arbitrary serviceUrl values. Attackers can submit a crafted POST request to inject an...
EUVD-2026-87654
Budibase before 3.45.0 contains an unauthenticated server-side request forgery and credential exfiltration vulnerability in the Microsoft Teams webhook endpoint that accepts forged Bot Framework activities with arbitrary serviceUrl values. Attackers can submit a crafted POST request to inject an...