146768 matches found
CVE-2026-20951
CVE-2026-20951 is a Microsoft SharePoint Server Remote Code Execution vulnerability caused by improper input validation in SharePoint. The issue allows an unauthenticated or authenticated attacker to execute code locally on affected SharePoint Server deployments. Documented affected products incl...
CVE-2026-20946 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-20946
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-20946
CVE-2026-20946 is an Out-of-bounds read in Microsoft Office Excel that allows local code execution. Connected sources confirm Excel/Office impact and provide remediation via the January 2026 security updates (e.g., KB5002831 for Excel 2016; MSRC update guidance). Affected products include Excel 2...
CVE-2026-20946 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-20943
Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-20944
CVE-2026-20944 describes an out-of-bounds read in Microsoft Word that could let an unauthenticated attacker execute code locally. The vulnerability affects Microsoft Word components in Office installations (Word/Word-related Word processing components) and is listed with a high impact (CVSS 3.1: ...
CVE-2026-20944 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-20943 Microsoft Office Click-To-Run Remote Code Execution Vulnerability
...
CVE-2026-20943 Microsoft Office Click-To-Run Remote Code Execution Vulnerability
...
CVE-2026-20943
CVE-2026-20943 is a Microsoft Office Click-To-Run remote code execution issue caused by an untrusted search path that could allow local code execution. Connected sources confirm affected Office variants and that Microsoft released security updates in January 2026 (e.g., KB5002828/KB5002822 for di...
CVE-2026-20944 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-20840 Windows NTFS Remote Code Execution Vulnerability
...
CVE-2026-20822
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-20803 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-20803 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-20803
CVE-2026-20803 is a Microsoft SQL Server elevation of privilege vulnerability. The issue allows an authenticated attacker to gain elevated privileges on the SQL Server instance over a network, due to missing authentication for a critical function. Connected advisories confirm exploitation risk an...
CVE-2026-21265
CVE-2026-21265 describes a Secure Boot bypass tied to expiration of Microsoft root certificates in the UEFI KEK/DB chain. Affected certificates include KEK CA 2011 (expires 2026-06-24), UEFI CA 2011 (expires 2026-06-27), and Windows Production PCA 2011 (expires 2026-10-19). The vulnerability aris...
How Microsoft builds privacy and security to work hand-in-hand
The Deputy CISO blog series is where Microsoft Deputy Chief Information Security Officers CISOs share their thoughts on what is most important in their respective domains. In this series, you will get practical advice, tactics to start and stop deploying, forward-looking commentary on where the...
