165923 matches found
FedCM Component DoS
The vulnerability of the FedCM component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Web Authentication Components Compromise Data Compromise
The vulnerability of the Web Authentication components Passkeys & Security Keys in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected...
PT-2026-114154
Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.41.4 n8n versions 2.42.x prior to 2.42.1 Description An SQL injection issue exists in version 1 of the Microsoft SQL node. The node substitutes expression values from the Query field directly into SQL text without using...
Security Updates for Microsoft SQL Server (October 2026)
The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. CVE-2026-65674 - Heap-based buffer overflow...
Security Updates for Microsoft Word Products C2R (October 2026)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVE-2026-70268, CVE-2026-70287, CVE-2026-70301, CVE-2026-70302,...
Security Updates for Microsoft PowerPoint Products C2R (October 2026)
The Microsoft PowerPoint Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-70215, CVE-2026-88178 - Heap-based buffer overflow in...
Security Updates for Microsoft Office Products C2R (October 2026)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. CVE-2026-88196, CVE-2026-88197 - Heap-based buffer overflow in Windo...
Security Updates for Microsoft Visio Products C2R (October 2026)
The Microsoft Visio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. CVE-2026-102855, CVE-2026-102856, CVE-2026-102857 Note that...
Security Updates for Microsoft Outlook Products C2R (October 2026)
The Microsoft Outlook Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. CVE-2026-70242, CVE-2026-70256, CVE-2026-70257,...
Security Updates for Microsoft OneNote Products C2R (October 2026)
The Microsoft OneNote Products are missing a security update. It is, therefore, affected by a use after free vulnerability in Microsoft Office OneNote that allows an authorized attacker to elevate privileges locally. CVE-2026-96997 Note that Nessus has not tested for this issue but has instead...
CVE-2026-88164: Missing Authorization
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
PT-2026-114316
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...
HttpsUpgrades Component Google Chrome Microsoft Edge Protected Information
The vulnerability of the HttpsUpgrades component in Google Chrome and Microsoft Edge is related to a lack of security mechanisms for protecting sensitive information. Exploiting this vulnerability could allow an attacker to gain access to protected information...
Omnibox address bars compromise Data Compromise
The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Office 365 Apps for Enterprise Buffer Overflow
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Aura component DoS
The vulnerability of the Aura component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Google Chrome Microsoft Edge Information Disclosure
The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
Microsoft Office 365 Apps for Enterprise Buffer Overflow
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...