146762 matches found
CVE-2026-21511
Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-21511
CVE-2026-21511 describes deserialization of untrusted data in Microsoft Office Outlook, enabling an unauthorized attacker to spoof over a network. Affected product: Microsoft Office Outlook. Root cause: unsafe deserialization of data. Impact: spoofing with network access; CVSS v3.1 base score 7.5...
CVE-2026-21511 Microsoft Outlook Spoofing Vulnerability
...
CVE-2026-21514 Microsoft Word Security Feature Bypass Vulnerability
...
CVE-2026-21525 Windows Remote Access Connection Manager Denial of Service Vulnerability
...
CVE-2026-21514 Microsoft Word Security Feature Bypass Vulnerability
...
CVE-2026-21514
CVE-2026-21514 — Microsoft Word Security Feature Bypass . A vulnerability in Word arises from reliance on untrusted inputs in a security decision, enabling a local attacker to bypass embedded/active-content protections. Public CVSS data from the Initial document indicates a 3.1 vector with LOCAL ...
CVE-2026-21537 Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability
...
CVE-2026-21527 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-21527
CVE-2026-21527 affects Microsoft Exchange Server. The issue is a UI misrepresentation of critical information that enables a network-based spoofing attack without user interaction or privileges. The CVSS v3.1 base metrics indicate an external attack vector with low impact on confidentiality and i...
CVE-2026-21522 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
CVE-2026-21522
Azure Compute Gallery is affected by CVE-2026-21522 due to improper neutralization of special elements used in a command, enabling an authorized attacker to achieve local privilege escalation. The issue concerns command injection in the Azure Compute Gallery workflow, with a CVSS v3.1 base score ...
CVE-2026-21513
CVE-2026-21513 is a security feature bypass vulnerability in the MSHTML Framework. Affected component: MSHTML/MSHTML Framework used by Windows’ browsing/rendering stack. Root cause details are described in vendor advisories and security blogs as a protection mechanism bypass that can be triggered...
CVE-2026-23655
CVE-2026-23655 : The issue involves cleartext storage of sensitive information in the Azure Compute Gallery, enabling an authorized attacker to disclose data over a network. From the provided data, the CVSS v3.1 base score is 6.5 (Medium) with Network access, Low attack complexity, Low privileges...
CVE-2026-23655 Microsoft ACI Confidential Containers Information Disclosure Vulnerability
...
CVE-2026-21235
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-21246
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-21258 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-21260
CVE-2026-21260 affects Microsoft Office Outlook, where exposure of sensitive information to an unauthorized actor enables network-based spoofing. The entry cites a CVSSv3.1 base score of 7.5 (HIGH) with an attack vector of NETWORK and no privileges required, but has no exploitation details in the...