79442 matches found
EUVD-2026-73854
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-73851
Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73848
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...
CVE-2026-81353
A heap-based buffer overflow in the HEIF Image Extensions component of the Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally . The vulnerability scores CVSS 7.8 (High) with a local attack vector, low complexity, no required privileges, but user interaction i...
CVE-2026-80076
CVE-2026-80076 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized, remote attacker to disclose information over a network. The vulnerability is rated CVSS 3.1 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:N/UI:R, meaning exploitation requires user interaction but ...
EUVD-2026-73833
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...
CVE-2026-78524
CVE-2026-78524 is an out-of-bounds write vulnerability in Microsoft Office that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R, meaning exploitation requires user interaction but no prior authen...
CVE-2026-78520
Microsoft Office Outlook is affected by an out-of-bounds read vulnerability (CVE-2026-78520), disclosed on 2026-09-08. The NVD description states it allows an unauthorized attacker to execute code over a network, while the associated CVSS 3.1 score of 6.5 (MEDIUM) with impacts limited to high con...
EUVD-2026-73828
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...
CVE-2026-78516
CVE-2026-78516 is a buffer over-read in Windows Storage that allows an unauthorized attacker with physical access to disclose sensitive information. The vulnerability requires user interaction and no prior privileges. Microsoft rates it CVSS 4.3 (Medium) with a High confidentiality impact but no ...
CVE-2026-78512
Microsoft Office Word is affected by a numeric truncation error that allows an unauthorized attacker to achieve remote code execution over a network. Exploitation requires user interaction (e.g., opening a crafted document) but no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) with full impac...
CVE-2026-78455
CVE-2026-78455 is an out-of-bounds read in Xbox that allows an unauthorized attacker with physical access to disclose information (high confidentiality impact). The attack requires user interaction but no prior privileges. CVSS v3.1 scores it 4.3 (MEDIUM) with a physical attack vector. CISA's SSV...
EUVD-2026-73800
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...
CVE-2026-77911
CVE-2026-77911 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The flaw requires user interaction and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availabilit...
EUVD-2026-73794
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73790
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-73025
CVE-2026-73025 is a Security Feature Bypass vulnerability in Windows iSCSI , rooted in weak authentication that allows an unauthorized attacker to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, n...
CVE-2026-73023
A heap-based buffer overflow in the Windows Imaging Component allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network reachability, low complexity, no priv...
CVE-2026-73018
CVE-2026-73018 is a heap-based buffer overflow in the Graphic Fonts component that allows an unauthorized attacker to achieve remote code execution over a network, with user interaction required . Scored CVSS 8.8 HIGH (C/H I/H A/H) and published by Microsoft (source: [email protected]). No spe...