2379 matches found
CVE-2026-69601
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-69556
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-69548
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-69479
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...
CVE-2026-69442
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
CVE-2026-69431
Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69378
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network...
CVE-2026-69360
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-68828
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-64918
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-58649
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-62804
CVE-2026-62804 is an external control of file name or path vulnerability in Microsoft Office Word that allows an unauthorized attacker to execute code locally. The flaw requires user interaction (e.g., opening a crafted file) and no prior privileges, with high impact to confidentiality, integrity...
EUVD-2026-73919
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-85875
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) , with a local attack vector, low complexity, no privileges required, and user interaction required. Impact is limited to confidentiality...
CVE-2026-83997
CVE-2026-83997 is a use-after-free vulnerability in Windows Message Queuing that allows an unauthorized attacker to achieve remote code execution over the network. The CNA-assigned CVSS 3.1 score is 8.1 (HIGH) , with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network attack vecto...
CVE-2026-69381
CVE-2026-69381 is an out-of-bounds read in the Windows Storage Port Driver that allows an unauthorized attacker with physical access to disclose information. The vulnerability requires no prior privileges or user interaction, but the physical attack vector limits its practical exploitability. The...
CVE-2026-83951
A buffer over-read in Microsoft Office Word allows an unauthorized attacker to locally disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N , meaning local access, low complexity, no privileges required, user interaction required, and high conf...
EUVD-2026-73890
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-81948
Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized local attacker to execute arbitrary code. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges, and results in high impact to confidentiality, integrity, an...