1507 matches found
CVE-2026-33111
Improper neutralization of special elements used in a command 'command injection' in Copilot Chat Microsoft Edge allows an unauthorized attacker to disclose information over a network...
EUVD-2026-29715
User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-29716
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to perform tampering over a network...
EUVD-2026-29712
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally...
EUVD-2026-29682
Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...
EUVD-2026-29665
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
EUVD-2026-29670
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network...
EUVD-2026-29649
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...
EUVD-2026-29640
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
EUVD-2026-29645
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
EUVD-2026-29633
User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-29641
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-29580
Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-42893
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to perform tampering over a network...
CVE-2026-42831
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-42832
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally...
CVE-2026-41614
Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally...
CVE-2026-40416
User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...