CVE-2026-69716

Microsoft Office SharePoint is affected by a SQL injection vulnerability (improper neutralization of special elements in an SQL command) that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with network attack vector, low complexity, lo...

EUVD-2026-73152

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-69722

Microsoft Office Word is affected by a stack-based buffer overflow that enables an unauthorized attacker to achieve remote code execution over a network . The vulnerability requires user interaction (e.g., opening a crafted document) but needs no prior authentication. The CVSS 3.1 score is 8.8 (H...

CVE-2026-69686

Microsoft Office Word is affected by a stack-based buffer overflow that allows an unauthorized, network-based attacker to achieve remote code execution . The CVSS 3.1 base score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that user interaction is required (e.g...

EUVD-2026-73150

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73151

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73148

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69671

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that user interaction is required (e.g., opening a crafted docum...

CVE-2026-69678

Microsoft Office PowerPoint is affected by a use-after-free vulnerability that allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with user interaction required and no prior privileges. The attack vector is network-based with low complexity, yie...

EUVD-2026-73149

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

EUVD-2026-73146

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69641

CVE-2026-69641 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 base score is 9.1 (Critical) with a scope change, indicating high impact on confidentiality, integrity, and availability onc...

EUVD-2026-73139

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69556

Microsoft Office Word is affected by a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior authentication, as reflected in the CVSS 3.1 base score of 8...

CVE-2026-69382

CVE-2026-69382 affects Microsoft Exchange Server due to the use of a broken or risky cryptographic algorithm , allowing an unauthorized, unauthenticated attacker to disclose information over a network . The CVSS 3.1 base score is 5.9 (MEDIUM) , reflecting a network attack vector with high complex...

EUVD-2026-73130

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-69380

CVE-2026-69380 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with high impact to confidentiality and integrity and no availability impact. Attack complexity is low, ...

EUVD-2026-73129

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73128

Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network...

CVE-2026-69375

CVE-2026-69375 is an authorization bypass through user-controlled key vulnerability in Microsoft Exchange Server that allows an authorized attacker to perform tampering over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N ...