162632 matches found
PT-2026-113265
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-112298
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...
PT-2026-112307
Name of the Vulnerable Software and Affected Versions Microsoft Power Apps affected versions not specified Description An origin validation error allows an authorized attacker to execute code over a network. Origin validation is a security mechanism used to verify that a request originates from a...
Microsoft Office: CVE-2026-88184: Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
Microsoft Office: CVE-2026-88153: Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
CVE-2026-97771: Use After Free
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-11732: Improper Input Validation
An insufficient input validation vulnerability in the website blocking feature Block Sites of the listed NETGEAR router models allows a network-adjacent attacker having network access such as WiFi credentials to run unauthorized commands on the router. This vulnerability could affect the...
CVE-2026-97747: Use After Free
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-67625: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-88094: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...
CVE-2026-88208: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-70267: Inclusion of Functionality from Untrusted Control Sphere
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-108463: Improper Resolution of Path Equivalence
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-107607: Missing Authentication for Critical Function
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication...
CVE-2026-97827: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-88166: Integer Overflow or Wraparound
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-70266: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-67626: Uncontrolled Resource Consumption
Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...