79380 matches found
CVE-2026-80076
CVE-2026-80076 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized, remote attacker to disclose information over a network. The vulnerability is rated CVSS 3.1 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:N/UI:R, meaning exploitation requires user interaction but ...
EUVD-2026-73833
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...
CVE-2026-78520
Microsoft Office Outlook is affected by an out-of-bounds read vulnerability (CVE-2026-78520), disclosed on 2026-09-08. The NVD description states it allows an unauthorized attacker to execute code over a network, while the associated CVSS 3.1 score of 6.5 (MEDIUM) with impacts limited to high con...
CVE-2026-78524
CVE-2026-78524 is an out-of-bounds write vulnerability in Microsoft Office that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R, meaning exploitation requires user interaction but no prior authen...
EUVD-2026-73828
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...
CVE-2026-78516
CVE-2026-78516 is a buffer over-read in Windows Storage that allows an unauthorized attacker with physical access to disclose sensitive information. The vulnerability requires user interaction and no prior privileges. Microsoft rates it CVSS 4.3 (Medium) with a High confidentiality impact but no ...
CVE-2026-78512
Microsoft Office Word is affected by a numeric truncation error that allows an unauthorized attacker to achieve remote code execution over a network. Exploitation requires user interaction (e.g., opening a crafted document) but no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) with full impac...
CVE-2026-78455
CVE-2026-78455 is an out-of-bounds read in Xbox that allows an unauthorized attacker with physical access to disclose information (high confidentiality impact). The attack requires user interaction but no prior privileges. CVSS v3.1 scores it 4.3 (MEDIUM) with a physical attack vector. CISA's SSV...
EUVD-2026-73800
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...
CVE-2026-77911
CVE-2026-77911 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The flaw requires user interaction and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availabilit...
EUVD-2026-73794
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73790
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73781
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-73025
CVE-2026-73025 is a Security Feature Bypass vulnerability in Windows iSCSI , rooted in weak authentication that allows an unauthorized attacker to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, n...
CVE-2026-73023
A heap-based buffer overflow in the Windows Imaging Component allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network reachability, low complexity, no priv...
EUVD-2026-73753
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...
CVE-2026-73018
CVE-2026-73018 is a heap-based buffer overflow in the Graphic Fonts component that allows an unauthorized attacker to achieve remote code execution over a network, with user interaction required . Scored CVSS 8.8 HIGH (C/H I/H A/H) and published by Microsoft (source: [email protected]). No spe...
EUVD-2026-73741
Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-72975
CVE-2026-72975 is an out-of-bounds read in Microsoft Office PowerPoint that allows an unauthenticated remote attacker to disclose information over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 scores it 6.5 (Medium) , with ...