CVE-2026-64918

Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-62804

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-58611

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

CVE-2026-55007

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

CVE-2026-85880

creationtimestamp| type| source ---|---|--- 2026-09-08 17:25:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117236585017342705 2026-09-08 18:09:10+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muzmkt3whi2t 2026-09-08 18:19:20+00:00| seen|...

CVE-2026-81963

creationtimestamp| type| source ---|---|--- 2026-09-08 17:25:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117236585017342705 2026-09-08 18:09:10+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muzmkt3whi2t 2026-09-08 18:19:20+00:00| seen|...

CVE-2026-62804

CVE-2026-62804 is an external control of file name or path vulnerability in Microsoft Office Word that allows an unauthorized attacker to execute code locally. The flaw requires user interaction (e.g., opening a crafted file) and no prior privileges, with high impact to confidentiality, integrity...

EUVD-2026-73923

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-84003

Microsoft Authentication Library (MSAL) for Node.js is affected by an authentication bypass via capture-replay that allows an unauthorized network attacker to perform spoofing . The underlying cause is the ability to capture and replay authentication tokens, leading to high confidentiality and in...

EUVD-2026-73919

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-85875

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) , with a local attack vector, low complexity, no privileges required, and user interaction required. Impact is limited to confidentiality...

CVE-2026-84000

CVE-2026-84000 is a heap-based buffer overflow in Microsoft Graphics Component that allows an authorized attacker to execute code locally. The vulnerability requires local access and low privileges but no user interaction, resulting in high impact to confidentiality, integrity, and availability (...

EUVD-2026-73917

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally...

CVE-2026-83990

CVE-2026-83990 is a stack-based buffer overflow in the Microsoft Graphics Component that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with a local attack vector, low privileges required, no user interaction, and high impact on confidenti...

EUVD-2026-73913

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-70145

CVE-2026-70145 is an out-of-bounds read in the Microsoft Windows Search Component that allows an authorized attacker to disclose information locally. The vulnerability is rated CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and no user interaction. The prim...

CVE-2026-83949

CVE-2026-83949 is a buffer over-read vulnerability in Microsoft Office Word that allows an unauthorized local attacker to disclose information. The attack requires local access and user interaction , with no privileges needed. The impact is limited to confidentiality (high), with no integrity or ...

EUVD-2026-73891

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

EUVD-2026-73890

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-83951

A buffer over-read in Microsoft Office Word allows an unauthorized attacker to locally disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N , meaning local access, low complexity, no privileges required, user interaction required, and high conf...