Lucene search
+L

146609 matches found

Positive Technologies
Positive Technologies
added 2026/01/26 12:00 a.m.18 views

PT-2026-4745

The program libraries DLL and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key cryptoKey to transform...

6.8CVSS5.9AI score0.00108EPSS
SaveExploits0References4
CISA KEV Catalog
CISA KEV Catalog
added 2026/01/26 12:00 a.m.28 views

Microsoft Office Security Feature Bypass Vulnerability

Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a security decision in Microsoft Office could allow an unauthorized attacker to bypass a security feature locally. Some of the impacted products could be end-of-life EoL and/or end-of-servic...

7.8CVSS7.3AI score0.72554EPSS
SaveIn wildExploits15
VulnCheck KEV
VulnCheck KEV
added 2026/01/26 12:00 a.m.37 views

VulnCheck KEV: CVE-2026-21509

Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally...

7.8CVSS5.7AI score0.72554EPSS
SaveIn wildExploits15References21
Kaspersky
Kaspersky
added 2026/01/26 12:00 a.m.49 views

KLA90861 SB vulnerability in Microsoft Office

A security feature bypass vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2026-21509 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such...

7.8CVSS5.5AI score0.72554EPSS
SaveExploits15References6
CNNVD
CNNVD
added 2026/01/26 12:00 a.m.15 views

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...

7.8CVSS7.8AI score0.72554EPSS
SaveExploits15References2
HackRead
HackRead
added 2026/01/24 5:36 p.m.15 views

FBI Accessed Windows Laptops After Microsoft Shared BitLocker Recovery Keys

If you are using a Windows PC, your privacy and security are nothing short of a myth, and this incident proves it...

5.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/24 3:17 a.m.25 views

CVE-2026-21264

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Account allows an unauthorized attacker to perform spoofing over a network...

9.3CVSS5.4AI score0.00377EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 11:15 p.m.13 views

CVE-2026-24307

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network...

9.3CVSS0.00823EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 11:15 p.m.12 views

CVE-2026-21264

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Account allows an unauthorized attacker to perform spoofing over a network...

9.3CVSS0.00377EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 10:47 p.m.4 views

CVE-2026-21264 Microsoft Account Spoofing Vulnerability

...

9.3CVSS5.3AI score0.00377EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 10:47 p.m.32 views

CVE-2026-21264 Microsoft Account Spoofing Vulnerability

...

9.3CVSS0.00377EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 10:47 p.m.78 views

CVE-2026-21264

CVE-2026-21264 concerns improper neutralization of input during web page generation (XSS) in Microsoft Account, enabling a network-based spoofing scenario. The vulnerability affects Microsoft Account web page rendering and can lead to spoofing without listed exploitation likelihood in the provide...

9.3CVSS5.4AI score0.00377EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/22 10:47 p.m.5 views

CVE-2026-21264

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Account allows an unauthorized attacker to perform spoofing over a network...

9.3CVSS5.4AI score0.00377EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/22 10:47 p.m.6 views

CVE-2026-24307

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network...

9.3CVSS5.4AI score0.00823EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/22 10:47 p.m.42 views

CVE-2026-24307

CVE-2026-24307 affects M365 Copilot. Root cause: improper validation of a specified input type. Impact: unauthorized disclosure of information over a network (confidentiality and integrity high; CVSS 9.3). Exploitation details are not provided in the supplied documents. Remediation is expected vi...

9.3CVSS5.3AI score0.00823EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/22 10:47 p.m.4 views

CVE-2026-24307 M365 Copilot Information Disclosure Vulnerability

...

9.3CVSS5.3AI score0.00823EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 10:47 p.m.41 views

CVE-2026-24307 M365 Copilot Information Disclosure Vulnerability

...

9.3CVSS0.00823EPSS
SaveExploits0References1
Microsoft Secure
Microsoft Secure
added 2026/01/22 5:00 p.m.12 views

Microsoft Security success stories: Why integrated security is the foundation of AI transformation

AI is transforming how organizations operate and how they approach security. In this new era of agentic AI, every interaction, digital or human, must be built on trust. As businesses modernize, they’re not just adopting AI tools, they're rearchitecting their digital foundations. And that means...

5.6AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/01/22 4:00 p.m.21 views

Microsoft Account Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Account allows an unauthorized attacker to perform spoofing over a network...

9.3CVSS5.5AI score0.00377EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/01/22 4:00 p.m.19 views

Azure Resource Manager Elevation of Privilege Vulnerability

Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network...

9.9CVSS7.2AI score0.0062EPSS
SaveExploits0
Rows per page
Query Builder