165889 matches found
Microsoft Windows HEVC Video Extensions < 2.4.87.0 RCE (October 2026)
The Windows 'HEVC Video Extensions' app installed on the remote host is prior to 2.4.87.0. It is, therefore, affected by a remote code execution vulnerability. Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...
Microsoft Power Apps < 3.26085.3.0 Remote Code Execution (October 2026)
The Windows 'Microsoft Power Apps' app installed on the remote host is prior to version 3.26085.3.0. It is, therefore, affected by a remote code execution vulnerability: - Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network. CVE-2026-70213...
Microsoft Edge (Chromium) < 155.0.4283.62 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 155.0.4283.62. It is, therefore, affected by multiple vulnerabilities as referenced in the October 16, 2026 advisory. - Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker ...
CVE-2026-109461: Origin Validation Error
Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...
CVE-2026-80092: Authentication Bypass by Assumed-Immutable Data
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network...
Security Updates for Microsoft Endpoint Configuration Manager (October 2026)
The Microsoft Endpoint Configuration Manager installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authoriz...
Microsoft PowerShell 7.4.x < 7.4.21 / 7.5.x < 7.5.12 / 7.6.x < 7.6.7 Multiple Vulnerabilities (October 2026)
The version of Microsoft PowerShell installed on the remote host is 7.4.x prior to 7.4.21, 7.5.x prior to 7.5.12, or 7.6.x prior to 7.6.7. It is, therefore, affected by multiple vulnerabilities: - Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized...
Microsoft PowerShell 7.4.x < 7.4.21 / 7.5.x < 7.5.12 / 7.6.x < 7.6.7 RCE (macOS)
The version of Microsoft PowerShell installed on the remote macOS host is 7.4.x prior to 7.4.21, 7.5.x prior to 7.5.12, or 7.6.x prior to 7.6.7. It is, therefore, affected by a remote code execution vulnerability. Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows ...
Security Update for Microsoft .NET Core (October 2026)
The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
Security Update for Microsoft .NET Core SDK (October 2026)
The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an...
CVE-2026-108453
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-108455
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-108454
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-108445
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-108447
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-108449
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-108446
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-108448
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...