CVE-2026-50675 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-50675 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-50678 Microsoft Excel Information Disclosure Vulnerability

...

CVE-2026-50678

CVE-2026-50678: A heap-based buffer overflow in Microsoft Excel (Office) allows local information disclosure. CVSS v3.1 base score 6.6 (Medium): AV:L, AC:L, PR:N, UI:R, S:U, C:L, I:L, A:H. No exploit details are provided in the accompanying documents; remediation status/patch info not specified.

CVE-2026-50678 Microsoft Excel Information Disclosure Vulnerability

...

CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-54108

CVE-2026-54108 affects Microsoft SharePoint Server. An authorized attacker can influence a file name or path in SharePoint, enabling network-based spoofing. CVSS v3.1: 6.5 (MEDIUM), AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Root cause details are not provided in the supplied documents; no exploitation...

CVE-2026-54108 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55002 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-55002 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2026-54118 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2026-54117 Microsoft SQL Server Remote Code Execution Vulnerability

...

CVE-2026-55011 Microsoft Defender Remote Code Execution Vulnerability

...

CVE-2026-55012 Microsoft Defender Remote Code Execution Vulnerability

...

CVE-2026-55011 Microsoft Defender Remote Code Execution Vulnerability

...

CVE-2026-55012 Microsoft Defender Remote Code Execution Vulnerability

...

CVE-2026-55012

CVE-2026-55012 is a Microsoft Defender vulnerability described as an integer overflow/wraparound that enables local code execution. The CVSS details indicate a Local attack vector with User Interaction required, no privileges required, and impacts to Confidentiality, Integrity, and Availability (...

CVE-2026-55009

CVE-2026-55009 describes a deserialization of untrusted data in Microsoft Exchange Server that enables a locally authenticated attacker to elevate privileges. The CVSSv3.1 details show a Local attack vector, Low attack complexity, Low privileges required, and No user interaction, with High impact...