145746 matches found
CVE-2026-26152 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
CVE-2026-26143
The CVE-2026-26143 entry concerns Improper input validation in Microsoft PowerShell that allows a local attacker to bypass a security feature. The advisory set shows affected software as Microsoft PowerShell with a high impact (MITRE-style: Circumvention of security measure) and a high base score...
CVE-2026-23657 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-23657 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-23657
CVE-2026-23657 — Microsoft Word remote/local code execution via use-after-free . The vulnerability affects Microsoft Word (part of Microsoft 365 Apps / Office) and is caused by a use-after-free in Word processing code that can lead to arbitrary code execution when a malicious document is opened. ...
CVE-2026-33825 Microsoft Defender Elevation of Privilege Vulnerability
...
CVE-2026-33825 Microsoft Defender Elevation of Privilege Vulnerability
...
CVE-2026-33825
CVE-2026-33825 is a local EoP vulnerability in the Microsoft Defender Antimalware Platform. A TOCTOU race condition during malware remediation (in Defender’s threat remediation engine) lets an authenticated, low-privilege user pause remediation via NTFS oplocks and redirect Defender operations th...
CVE-2026-33825
Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally...
CVE-2026-33822
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-33822
CVE-2026-33822 is a Microsoft Word information disclosure vulnerability. The provided metrics indicate a CVSS v3.1 base score of 6.1 (MEDIUM) with a LOCAL attack vector, USER INTERACTION required , and a confidentiality impact LOW alongside an availability impact HIGH ; there is no noted impact o...
CVE-2026-33120 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-33822 Microsoft Word Information Disclosure Vulnerability
...
CVE-2026-33822 Microsoft Word Information Disclosure Vulnerability
...
CVE-2026-33120 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-33120
CVE-2026-33120 affects Microsoft SQL Server and is a remote code execution vulnerability. The entry documents a network-based exploit with low attack complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. The CVSS v3.1 base score is 8.8 (...
CVE-2026-33095
CVE-2026-33095 is a Microsoft Word vulnerability described as a local, user-interaction-requiring remote code execution with a CVSS v3.1 base score of 7.8 (High) and high impacts to confidentiality, integrity, and availability. The remediation level is Official Fix per the update guidance. The do...
CVE-2026-33095 Microsoft Word Remote Code Execution Vulnerability
...