146609 matches found
CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
...
CVE-2026-41103
CVE-2026-41103 concerns the Microsoft SSO Plugin for Jira & Confluence, where an incorrect authentication algorithm implementation allows privilege elevation over a network. The risk is described as network-exploitable with no user interaction, high confidentiality and integrity impact, and no av...
CVE-2026-41103
Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-40420 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40420 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40420
CVE-2026-40420 : Affected product: Microsoft Office Click-To-Run. Description: Improper access control allows an authorized attacker to elevate privileges locally. The vulnerability is described across multiple sources (NVD, CVE lists) with a high impact score (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:C/C...
CVE-2026-35436 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-35436 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40418 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40418
Technical details (affected product, vulnerable component, version, exploit method) are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2026-40418 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40367 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-40367 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-40367
CVE-2026-40367 describes an Untrusted pointer dereference in Microsoft Word that enables local code execution. Based on the provided documents, the affected product is Microsoft Word (Office). The vulnerability allows an attacker to execute code locally without user interaction, as indicated by t...
CVE-2026-40367
Access of resource using incompatible type 'type confusion' in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-40362
Summary: CVE-2026-40362 is a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code. The CVSS 3.1 vector indicates LOCAL attack, no privileges required, user interaction required, with a High impact on confidentiality, integrity, and availability (base s...
CVE-2026-40365 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-40362 Microsoft Excel Remote Code Execution Vulnerability
...