146762 matches found
wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
...
Microsoft VFS for Git code issue vulnerability
Microsoft VFS for Git is a Git optimization system developed by Microsoft Corporation in the United States. Version 1.0.21014.1 of Microsoft VFS for Git contains a code vulnerability. This vulnerability stems from the Windows service GVFS.Service having a service path that lacks quotes, which may...
The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise, related to memory usage after it is released, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise lies in the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Excel Access Control Error Vulnerability
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to bypass certain features...
Microsoft Excel Code Execution Vulnerability (CNVD-2026-08746)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code...
Microsoft Graphics Kernel Competitive Conditions Issue Vulnerability
Microsoft Graphics Kernel is a kernel-mode graphics driver subsystem from Microsoft. A security vulnerability exists in Microsoft Graphics Kernel. An attacker could exploit the vulnerability to gain elevated privileges...
Microsoft Windows SMB Server Elevation of Privilege Vulnerability (CNVD-2026-10679)
Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. An elevation of privilege vulnerability exists in Microsoft Windows SMB Server due to...
Microsoft Windows Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Tablet Windows User Interface TWINUI Subsystem, which can be exploited by attackers to obtain sensitive...
Microsoft Windows Management Services Elevation of Privilege Vulnerability
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Management Services due to concurrent execution in Management Services using shared resources with incorrect...
Microsoft Excel Code Execution Vulnerability (CNVD-2026-08747)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code...
Microsoft Graphics Component Resource Management Error Vulnerability
Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker could exploit this vulnerability to gain elevated privileges...
Chromium: CVE-2026-0902 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
January 17, 2026—KB5077796 (OS Builds 19045.6811 and 19044.6811) Out-of-band
None None...
CVE-2026-21223 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
CVE-2026-21223
CVE-2026-21223 affects Microsoft Edge (Chromium-based) via the Edge Elevation Service. The vulnerability is a design flaw in a privileged COM interface (IElevatorEdge) that does not properly validate the caller’s privileges, enabling a standard local user to invoke LaunchUpdateCmdElevatedAndWait ...
CVE-2026-20960
Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...
CVE-2026-20960 PowerApps Desktop Client Remote Code Execution Vulnerability
...
CVE-2026-20960
Technical details (affected product versions, root cause, and fixes) are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.
Security Bulletin: A vulnerability in Microsoft Authentication Library affects IBM Robotic Process Automation and may result in a denial of service (CVE-2024-27086)
Summary A vulnerability in Microsoft Authentication Library affects IBM Robotic Process Automation which may result in a denial of service. Microsoft Azure Identity is used by IBM Robotic Process Automation for authentication processing. This bulletin identifies the security fixes to apply to...