146614 matches found
PT-2026-2757
CVE-2026-20958 Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. https://t.co/27qwZPmRNM...
PT-2026-2672
Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A flaw exists in the Microsoft Graphics Component that could allow a local attacker to gain elevated privileges. The issue is a use-after-free condition. Recommendations ...
PT-2026-2744
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An issue exists in Microsoft Office where an untrusted search path can allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information...
PT-2026-2752
Name of the Vulnerable Software and Affected Versions Microsoft Office and Microsoft 365 Apps for Enterprise affected versions not specified Description A use-after-free condition exists in Microsoft Office and Microsoft 365 Apps for Enterprise. Exploitation of this issue could allow an attacker ...
Microsoft SQL Server 访问控制错误漏洞
Microsoft SQL Server is a large commercial database system from Microsoft Corporation that is used on Microsoft Windows systems. An access control error vulnerability exists in Microsoft SQL Server. An attacker could exploit the vulnerability to elevate privileges. The following products and...
Microsoft Windows Virtualization-Based Security Enclave 安全漏洞
Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is a software-based trusted execution environment in the address space of host applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Virtualization-Based Security...
PT-2026-2687
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in Windows Media, potentially allowing a local attacker to execute code. Recommendations At the moment, there is no information about a newer...
Microsoft Windows SMB Server 竞争条件问题漏洞
Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. An elevation of privilege vulnerability exists in Microsoft Windows SMB Server, which can b...
Microsoft HTTP.sys 访问控制错误漏洞
Microsoft HTTP.sys is an HTTP application protocol from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft HTTP.sys. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 21H2 for...
Microsoft Excel 数字错误漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A numeric error vulnerability exists in Microsoft Excel. An attacker could exploit this vulnerability to remotely execute code. The following products and editions are affected: Microsoft Offi...
PT-2026-2748
CVE-2026-20948 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. https://t.co/RWIO4Ijxeo...
.NET 10.0 Update - January 13, 2026
None None...
PT-2026-2750
CVE-2026-20950 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. https://t.co/l03CyJMt0H...
Security Updates for Microsoft Office Products (January 2026)
The Microsoft Office Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2026-20952, CVE-2026-20953 - A...
Security Updates for Microsoft Word Products (January 2026)
The Microsoft Word Products are missing a security update. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2026-20948 Note that Nessus has not tested for this issue but h...
Microsoft Office 代码问题漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A code issue vulnerability exists in Microsoft Office. An attacker exploiting this...
PT-2026-2749
CVE-2026-20949 Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally. https://t.co/ASZWOprilb...
Microsoft Excel 缓冲区错误漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Excel. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are affected:Microsoft Office...
PT-2026-2756
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An integer underflow condition exists in Microsoft Office Excel that could allow an unauthorized attacker to execute code locally. The issue is due to an integer underflow, als...