146762 matches found
CVE-2026-20952
CVE-2026-20952 is a Use-After-Free remote code execution vulnerability in Microsoft Office affecting multiple Office components (Word/Excel/Office suite) across versions. The underlying issue is a memory-management flaw that could allow local code execution when processing Office content. Connect...
CVE-2026-20950
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-20949 Microsoft Excel Security Feature Bypass Vulnerability
...
CVE-2026-20950 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-20950
CVE-2026-20950 is a Microsoft Excel remote code execution vulnerability reported as a use-after-free in Excel affecting Office/Excel components. Exploitation would allow an attacker to execute code locally on a vulnerable system. Multiple connected sources confirm Excel is affected and that updat...
CVE-2026-20950 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-20949 Microsoft Excel Security Feature Bypass Vulnerability
...
CVE-2026-20949
CVE-2026-20949 is a Microsoft Excel/Office security feature bypass vulnerability described as an improper access control issue that could allow a local attacker to bypass a security feature. Multiple sources (NVD, MSRC, CNVD, EUVD) consistently identify Excel as affected and classify the impact a...
CVE-2026-20948
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-20948
The CVE-2026-20948 entry affects Microsoft Word (Office Word). It is described as an Untrusted pointer dereference in Microsoft Office Word that allows an unauthorized attacker to execute code locally (remote code execution). The issue is evidenced by multiple sources, with a CVSS v3.1 base score...
CVE-2026-20948 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-20948 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-20947
CVE-2026-20947 is a Microsoft SharePoint/Office SharePoint Remote Code Execution vulnerability caused by improper neutralization of SQL elements in SharePoint. An attacker can trigger code execution over the network with low privileges and no user interaction on affected SharePoint Server deploym...
CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-20959
CVE-2026-20959 is a cross-site scripting vulnerability in Microsoft Office SharePoint (Server/Subscription Edition) caused by improper neutralization of input during web page generation. An authorized attacker could spoof a user over the network. Affected products include SharePoint Server (2016/...
CVE-2026-20963 Microsoft SharePoint Remote Code Execution Vulnerability
...
EUVD-2026-2114
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...