121 matches found
CVE-2026-94104
NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint (filemanager.php). The root cause is a failure to validate file extensions for new filenames or when the chunks parameter is 2 or higher. An attacker with view-only back-office access can u...
Security Updates for Microsoft Access Products C2R (September 2026)
The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. CVE-2026-69529, CVE-2026-69778 - Stack-based buffer overflow ...
Security Updates for Microsoft Access Products (September 2026)
The Microsoft Access Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally. CVE-2026-69477 - Heap-based buffer overflow in Microsoft Office...
CVE-2026-69778
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69614
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69529
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69477
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...
CVE-2026-69477
A heap-based buffer overflow in Microsoft Office Access allows an authorized attacker with local access and low privileges to execute code, provided user interaction is required. The vulnerability is rated CVSS 7.3 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, reflecting full impac...
EUVD-2026-73717
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...
EUVD-2026-73714
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69614
CVE-2026-69614 is a stack-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (HIGH) , with a vector of network attack, low complexity, no privileges required, and user interac...
EUVD-2026-73242
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69778
CVE-2026-69778 is a heap-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The CVSS v3.1 score is 8.8 (HIGH) with a network vector, low complexity, no required privileges, but user interaction required . CISA's SSVC assessment in...
CVE-2026-69529
CVE-2026-69529 is a heap-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The attack requires user interaction (e.g., opening a crafted file) but needs no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) , with impacts of high...
EUVD-2026-73239
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
Microsoft Office Access Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...
CVE-2026-64920
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally...