298058 matches found
CVE-2026-78509
CVE-2026-78509 is a heap-based buffer overflow in Microsoft Office Outlook that allows an unauthorized, remote attacker to achieve code execution over a network with no user interaction. The CNA-assigned CVSS 3.1 score is 9.8 (Critical) , reflecting low attack complexity and full impact on confid...
EUVD-2026-73312
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78504
CVE-2026-78504 is a stack-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 3.1: 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user inter...
EUVD-2026-73308
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78510
A heap-based buffer overflow exists in Microsoft Office and Microsoft 365 Apps for Enterprise packages, specifically affecting Microsoft Word and Microsoft Outlook . This vulnerability allows an unauthorized attacker to execute arbitrary code. While the Initial Description mentions local executio...
EUVD-2026-73307
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
EUVD-2026-73304
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78511
CVE-2026-78511 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted document), with no prior privileges needed and low attack complexity. ...
EUVD-2026-73299
Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
EUVD-2026-73296
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-78439
CVE-2026-78439 is a stack-based buffer overflow in the Microsoft Office Graphics Component that allows an unauthorized attacker to execute code over a network, rated CVSS 3.1: 8.8 (High) . The attack vector is network-based with low complexity and no privileges required , though user interaction ...
EUVD-2026-73294
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
EUVD-2026-73293
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-77907
A heap-based buffer overflow in Visual Studio allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (High) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning user interaction is required but no prior privileges are needed. CISA's ...
CVE-2026-77908
CVE-2026-77908 is a code injection vulnerability in Microsoft Dynamics 365 On-Premises that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The flaw stems from improper control of code generation, and the CVSS 3.1 score is 8.8 (HIGH) with impacts ra...
EUVD-2026-73289
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
EUVD-2026-73290
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
CVE-2026-69285
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning it requires user interaction but no prior authentication....
CVE-2026-69273
CVE-2026-69273 is an improper access control vulnerability in Microsoft Office SharePoint that allows an authorized attacker to execute code over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with a network attack vector, low complexity, and low required privileges, resulting in high impact ...