146691 matches found
Microsoft Windows Kernel 安全漏洞
The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. An information disclosure vulnerability exists in Microsoft Windows Kernel, which can be exploited by attackers to obtain sensitive information...
PT-2026-32850
CVE-2026-32198 | Microsoft 365 Apps for Enterprise | Remote Code Execution Description Use-after-free vulnerability in Microsoft Office Excel allows unauth attacker to achieve RCE locally by tricking user into opening malicious Excel file. Severity: High Exploitation: Unknown Public PoC: Unknown...
Security Updates for Microsoft Office Products (April 2026)
The Microsoft Office Products are missing a security update. It is, therefore, affected by a use after free vulnerability in Microsoft Office that allows an unauthorized attacker to execute code locally. CVE-2026-32190 Note that Nessus has not tested for this issue but has instead relied only on...
Security Updates for Microsoft PowerPoint Products (April 2026)
The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by a use after free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to execute code locally. CVE-2026-32200 Note that Nessus has not tested for this issue but has instead...
Microsoft多款产品 安全漏洞
Microsoft Visual Studio is a product of the American company Microsoft. Microsoft Visual Studio is a series of development toolkits, and it also constitutes a complete set of development tools. The Microsoft .NET Framework is a comprehensive and consistent programming model, and it serves as a...
Malicious code in @aircall-ecosystem/integrations-msteams-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4343cd15bb1d3104166b2ddf4f549bc184fde49233b5cfba97f353f00a8c2a2e The package @aircall-ecosystem/integrations-msteams-frontend was found to contain malicious code. Source: ghsa-malware...
CISA Adds Seven Known Exploited Vulnerabilities to Catalog
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2012-1854link is external Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability CVE-2020-9715link is external Adobe Acrobat...
CVE-2026-0234
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources...
CVE-2026-0234 Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources...
CVE-2026-0234
CVE-2026-0234 affects Cortex XSOAR and Cortex XSIAM in the Microsoft Teams integration. The vulnerability arises from improper verification of cryptographic signatures, allowing an unauthenticated actor to access and modify protected resources. Technical details in PT-Security and vendor advisori...
CVE-2026-0234 Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources...
Microsoft Windows Link Following Vulnerability
Microsoft Windows contains a link following vulnerability that allows for privilege escalation...
Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment
...
Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
...
Unbounded allocation for old GNU sparse in archive/tar
...
OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)
...
Addressable has a Regular Expression Denial of Service in Addressable templates
...
Chromium: CVE-2026-5918 Inappropriate implementation in Navigation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-5887 Insufficient validation of untrusted input in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-5878 Incorrect security UI in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...