EUVD-2026-100598

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...

EUVD-2026-99041

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

CVE-2026-102856

A heap-based buffer overflow exists in Microsoft Office Visio that allows an unauthorized attacker to execute code over a network. This vulnerability involves a CWE-122 heap-based buffer overflow and a CWE-190 integer overflow or wraparound. Exploitation would allow an attacker to execute arbitra...

CVE-2026-102858

A heap-based buffer overflow exists in Microsoft Office OneNote , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 . While the impact is high, user interaction is required for exploitation. Official remediation ...

CVE-2026-102857

A heap-based buffer overflow exists in Microsoft Office Visio , which could allow an unauthorized attacker to execute code over a network . This vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-193 (Off-by-one Error). While the documents confirm the vulnerability's pr...

EUVD-2026-100601

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-108457

An out-of-bounds write vulnerability exists in Microsoft Windows PDF that could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-787 . While specific technical details regarding the underlying function or file are not provided, the impact is...

CVE-2026-108400

A vulnerability in the Microsoft Windows Codecs Library involving an integer overflow or wraparound allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. Specifically, this affects the HEVC Video Extensions component. The vulnerability carries a HIGH base severity...

EUVD-2026-99027

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-103572

A code injection vulnerability exists in Visual Studio Tools for Applications and SQL Server Management Studio . Due to improper control of code generation, an unauthorized attacker can execute arbitrary code over a network. This vulnerability has a CVSS 3.1 score of 8.8 and is reported to have a...

CVE-2026-102850

A heap-based buffer overflow vulnerability exists in Microsoft Office Access , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed to have a HIGH severity (CVSS 3.1 score of 8.8). To successfully exploit this, an attacker woul...

EUVD-2026-99026

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

EUVD-2026-99025

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-102849

A heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to achieve remote code execution over a network. While the specific vulnerable component is not detailed, the vulnerability is confirmed to impact the Access product. Exploitation typically requires the victim...

CVE-2026-104085

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...

UBUNTU-CVE-2026-104085

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...

CVE-2026-104085

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...

CVE-2026-75120

The OpenText™ (EnCase SAFE Agents) component, used by products including OpenText™ Endpoint Investigator , Endpoint Forensics & Response , Information Assurance , and Endpoint Security , contains a security vulnerability. This flaw allows unauthorized or unauthenticated activity to establish an u...

CVE-2026-75120 Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents

The OpenText™ EnCase SAFE Agents component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activi...

CVE-2026-104085 odt2spip < 4.4.0 OS Command Injection via Document Filename

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...