146609 matches found
CVE-2026-41614
CVE-2026-41614 concerns M365 Copilot for Desktop where improper access control enables a local attacker to spoof identities. The available documents identify the affected software (M365 Copilot for Desktop) and the impact as local spoofing due to insufficient access permissions, but do not provid...
CVE-2026-41102
Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally...
CVE-2026-41102 Microsoft PowerPoint for Android Spoofing Vulnerability
...
CVE-2026-41102
CVE-2026-41102 affects Microsoft Office PowerPoint with an improper access control, enabling a locally authenticated attacker to spoof content. Descriptions across sources indicate PowerPoint is the affected component, with the vulnerability enabling spoofing at local scope (attack vector: local;...
CVE-2026-41100 Microsoft 365 Copilot for Android Spoofing Vulnerability
...
CVE-2026-41100
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally...
CVE-2026-41100 Microsoft 365 Copilot for Android Spoofing Vulnerability
...
CVE-2026-41101
Technical details about CVE-2026-41101 are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected products, versions, root cause, or remediation are included in the supplied material.
CVE-2026-41100
CVE-2026-41100 describes an improper access control vulnerability in Microsoft 365 Copilot (Android) that allows an authorized attacker to perform local spoofing. The NVD entries consistently flag local attack vector with low attack complexity and low privileges required, resulting in a CVSS v3.1...
CVE-2026-41101 Microsoft Word for Android Spoofing Vulnerability
...
CVE-2026-41101
Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally...
CVE-2026-41101 Microsoft Word for Android Spoofing Vulnerability
...
CVE-2026-41096
Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-41094 Microsoft Data Formulator Remote Code Execution Vulnerability
...
CVE-2026-41094
Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...
CVE-2026-41094
CVE-2026-41094: Improper control of generation of code ('code injection') in Microsoft Data Formulator enables an unauthenticated attacker to execute code over a network. Base CVSS v3.1 score 8.8 (High) with network access, no privileges, user interaction required. Exploitation status is not deta...
CVE-2026-40419
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...
CVE-2026-40421 Microsoft Word Information Disclosure Vulnerability
...
CVE-2026-40421
CVE-2026-40421 affects Microsoft Word (Office) with vulnerability caused by external control of a file name or path in Word. This leads to an information disclosure over a network. The CVE is referenced alongside a Word 2016 security update (KB5002858) that addresses multiple related CVEs includi...