146610 matches found
CVE-2026-40421 Microsoft Word Information Disclosure Vulnerability
...
CVE-2026-40419 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40419
CVE-2026-40419 : A use-after-free vulnerability in Microsoft Office (Click-To-Run) could allow an authorized local attacker to achieve elevation of privilege. The underlying cause is a use-after-free issue in Office components, leading to local privilege escalation. Documented impact is local, wi...
CVE-2026-40417 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
...
CVE-2026-40417
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-40380 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
...
CVE-2026-40374
CVE-2026-40374 concerns Exposure of sensitive information to an unauthorized actor in Power Automate Desktop. The connected documents indicate an information disclosure vulnerability affecting Power Automate Desktop, with a CVSS v3.1 base score of 6.5 (NETWORK, LOW attack complexity, PRIVILEGES R...
CVE-2026-40377
Technical details (affected components, root cause, impact specifics, or fixes) are not publicly provided in the connected documents. Monitor vendor advisories for patch information and affected products; no additional specifics are available here.
CVE-2026-40377 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
CVE-2026-40374 Microsoft Power Automate Desktop Information Disclosure Vulnerability
...
CVE-2026-40377 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
CVE-2026-40368
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-40368 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-40368 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-40364 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-40366
Access of resource using incompatible type 'type confusion' in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-40364
Access of resource using incompatible type 'type confusion' in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-40366 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-40364
CVE-2026-40364 affects Microsoft Word, where an error described as a type confusion in resource access can allow an unauthenticated attacker to trigger remote code execution via Word documents. The CVE is tracked with a high CVSS v3.1 score (8.4) and a local attack vector with no user interaction...