146770 matches found
Microsoft Exchange Server Spoofing Vulnerability (CNVD-2026-14410)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by an attack...
Microsoft Word Code Execution Vulnerability (CNVD-2025-30663)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
c-ares has a Use After Free vulnerability when connection is cleaned up after error
...
KLA90822 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in Password Manager can be exploited to cause denial of...
Security Updates for Microsoft Access Products C2R (December 2025)
The Microsoft Access Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-62552 Note that Nessus has n...
Security Updates for Microsoft Excel Products C2R (December 2025)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-62553, CVE-2025-62556...
Microsoft Edge (Chromium) < 143.0.3650.80 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 143.0.3650.80. It is, therefore, affected by multiple vulnerabilities as referenced in the December 11, 2025 advisory. - Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote...
Security Updates for Microsoft Office Products C2R (December 2025)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-62554, CVE-2025-62557 Note that...
CVE-2025-64667
User interface ui misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-64670
Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information over a network...
CVE-2025-62563
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-62557
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-62558
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-62562
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally...
CVE-2025-62552
Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally...
CVE-2025-62554
Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-62556
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-62553
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...