146227 matches found
Microsoft .NET Framework 安全漏洞
Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a development platform. The platform includes the C and Visual Basic programming languages, a public language runtime library, and an extensive class library. A security vulnerability...
PT-2026-32840
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description Improper privilege management in the Telemetry Service allows an authorized attacker to cause a local denial of service, which affects the system. Recommendations At the moment, the...
Microsoft Excel 资源管理错误漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...
Microsoft SQL Server 安全漏洞
Microsoft SQL Server is a large-scale commercial database system developed by Microsoft Corporation, used under the Microsoft Windows operating system. There are security vulnerabilities in Microsoft SQL Server. Attackers can exploit these vulnerabilities to execute code...
Microsoft Management Console 访问控制错误漏洞
Microsoft Management Console is a general-purpose management console framework developed by Microsoft Corporation. It is used to host and manage various system management tools, known as console plugins or management units. There is an access control error vulnerability in Microsoft Management...
Microsoft Windows Shell 安全漏洞
The Microsoft Windows Shell is the graphical user interface for the Windows operating system from Microsoft.The easily recognizable elements of the Windows shell include features such as the desktop, the taskbar, the start menu, the task switcher, and autoplay. A security feature bypass...
Microsoft Word 安全漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word due to an untrusted pointer dereference flaw. An attacker could exploit this vulnerability to execute arbitrary code on a system...
The vulnerability of the Agents component in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.
The vulnerability of the Agents component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...
The vulnerability of the WindowDialog component in Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the WindowDialog component in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the rendering process and affect the confidentiality, integrity, and accessibility of protect...
Security Updates for Microsoft PowerPoint Products (April 2026)
The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by a use after free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to execute code locally. CVE-2026-32200 Note that Nessus has not tested for this issue but has instead...
Security Updates for Microsoft Office Products (April 2026)
The Microsoft Office Products are missing a security update. It is, therefore, affected by a use after free vulnerability in Microsoft Office that allows an unauthorized attacker to execute code locally. CVE-2026-32190 Note that Nessus has not tested for this issue but has instead relied only on...
PT-2026-32851
CVE-2026-32199 | Microsoft 365 Apps for Enterprise | Remote Code Execution Description Use-after-free vulnerability in Microsoft Office Excel allows unauth attacker to achieve RCE locally by tricking user into opening malicious Excel file. Severity: High Exploitation: Unknown Public PoC: Unknown...
PT-2026-32878
Name of the Vulnerable Software and Affected Versions Microsoft 365 Apps for Enterprise versions 16.0.1 through 16.0.1 Description Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally by tricking a user into opening a malicious document...
Microsoft Windows Ancillary Function Driver for WinSock 代码问题漏洞
The Microsoft Windows Ancillary Function Driver for WinSock is a supplementary function driver for Winsock by Microsoft Corporation. There are code-related vulnerabilities in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit these vulnerabilities to gain elevated...
Microsoft Excel 资源管理错误漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...
Security Updates for Microsoft Office Products C2R (April 2026)
The Microsoft Office Products are missing a security update. It is, therefore, affected by a use after free vulnerability in Microsoft Office that allows an unauthorized attacker to execute code locally. CVE-2026-32190 Note that Nessus has not tested for this issue but has instead relied only on...
PT-2026-32853
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description An improper input...
KLA90983 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories CVE-2026-33825 Exploitation Public exploits exist for this vulnerability. Malware exists for this...
Malicious code in @aircall-ecosystem/integrations-msteams-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4343cd15bb1d3104166b2ddf4f549bc184fde49233b5cfba97f353f00a8c2a2e The package @aircall-ecosystem/integrations-msteams-frontend was found to contain malicious code. Source: ghsa-malware...
CISA Adds Seven Known Exploited Vulnerabilities to Catalog
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2012-1854link is external Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability CVE-2020-9715link is external Adobe Acrobat...