145729 matches found
CVE-2026-41094 Microsoft Data Formulator Remote Code Execution Vulnerability
...
CVE-2026-41094
Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...
CVE-2026-41094
CVE-2026-41094: Improper control of generation of code ('code injection') in Microsoft Data Formulator enables an unauthenticated attacker to execute code over a network. Base CVSS v3.1 score 8.8 (High) with network access, no privileges, user interaction required. Exploitation status is not deta...
CVE-2026-40421 Microsoft Word Information Disclosure Vulnerability
...
CVE-2026-40421 Microsoft Word Information Disclosure Vulnerability
...
CVE-2026-40419
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...
CVE-2026-40421
CVE-2026-40421 affects Microsoft Word (Office) with vulnerability caused by external control of a file name or path in Word. This leads to an information disclosure over a network. The CVE is referenced alongside a Word 2016 security update (KB5002858) that addresses multiple related CVEs includi...
CVE-2026-40419 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40419
CVE-2026-40419 : A use-after-free vulnerability in Microsoft Office (Click-To-Run) could allow an authorized local attacker to achieve elevation of privilege. The underlying cause is a use-after-free issue in Office components, leading to local privilege escalation. Documented impact is local, wi...
CVE-2026-40417 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
...
CVE-2026-40417
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-40380 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
...
CVE-2026-40374
CVE-2026-40374 concerns Exposure of sensitive information to an unauthorized actor in Power Automate Desktop. The connected documents indicate an information disclosure vulnerability affecting Power Automate Desktop, with a CVSS v3.1 base score of 6.5 (NETWORK, LOW attack complexity, PRIVILEGES R...
CVE-2026-40377
Technical details (affected components, root cause, impact specifics, or fixes) are not publicly provided in the connected documents. Monitor vendor advisories for patch information and affected products; no additional specifics are available here.
CVE-2026-40377 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
CVE-2026-40374 Microsoft Power Automate Desktop Information Disclosure Vulnerability
...
CVE-2026-40377 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
CVE-2026-40368
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...