146762 matches found
ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
...
netrom: Fix memory leak in nr_sendmsg()
...
e1000: fix OOB in e1000_tbi_should_accept()
...
ksmbd: fix buffer validation by including null terminator size in EA length
...
Epic Games Store Installation DLL Hijacking Privilege Escalation Vulnerability
Talos Vulnerability Report TALOS-2025-2279 Epic Games Store Installation DLL Hijacking Privilege Escalation Vulnerability January 15, 2026 CVE Number CVE-2025-61973 SUMMARY A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A...
PT-2026-3020
A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...
CVE-2026-20946
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-20944
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-20953
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-20951
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...
CVE-2026-20948
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-20957
Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-20943
Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-20963
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-20950
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-20952
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-20822
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-20956
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
DRUPAL-CONTRIB-2026-005
This module enables Drupal sites to authenticate users via Microsoft Entra ID formerly Azure AD using OAuth 2.0. The module doesn't sufficiently validate API responses from Microsoft allowing complete account takeover of any user, including site administrators, without requiring any credentials o...
Microsoft named a Leader in IDC MarketScape for Unified AI Governance Platforms
As organizations rapidly embrace generative and agentic AI, ensuring robust, unified governance has never been more critical. That’s why Microsoft is honored to be named a Leader in the2025-2026 IDC MarketScape for Worldwide Unified AI Governance Platforms Vendor Assessment US53514825, December...