Lucene search
+L

5931 matches found

Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.16 views

PT-2026-47957

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An untrusted pointer dereference allows an unauthorized attacker to execute arbitrary code locally and remotely, affecting the system. Recommendations At the moment, there is no...

7.8CVSS7.4AI score0.00455EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.17 views

PT-2026-47968

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An untrusted pointer dereference allows an unauthorized attacker to execute code locally. Although the impact is remote, the payload executes on the local machine. Recommendatio...

7.8CVSS5.4AI score0.00372EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.26 views

PT-2026-48007

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description An untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute arbitrary code...

7.8CVSS6.1AI score0.00372EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.31 views

Microsoft Office 缓冲区错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is a code execution vulnerability in Microsoft Office, which is caused by improper...

7.8CVSS7.8AI score0.00455EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.24 views

Microsoft Office Word 资源管理错误漏洞

Microsoft Office Word is a word processing software developed by Microsoft. There is a resource management vulnerability in Microsoft Office Word, which stems from an untrusted pointer dereferencing. This vulnerability may allow unauthorized attackers to execute code locally...

7.8CVSS5.6AI score0.00372EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.20 views

Microsoft Office 缓冲区错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is a security vulnerability in Microsoft Office, which stems from a heap buffer overflow...

7.8CVSS7.4AI score0.00455EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.18 views

Microsoft Office Word 缓冲区错误漏洞

Microsoft Office Word is a word processing software developed by Microsoft and open sourced. There are security vulnerabilities in Microsoft Office Word. Attackers can exploit these vulnerabilities to execute code. The following products and versions are affected: Microsoft 365 Apps for Enterpris...

7.8CVSS5.8AI score0.00372EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.19 views

PT-2026-47953

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory. In Microsoft Offic...

3.3CVSS6.1AI score0.00385EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/06/09 12:00 a.m.46 views

Security Updates for Microsoft Word Products (June 2026)

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-45456, CVE-2026-45458 - Untrust...

8.4CVSS7.2AI score0.00455EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.24 views

Microsoft Office 缓冲区错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is a security vulnerability in Microsoft Office, which stems from type confusion. This...

8.4CVSS7.1AI score0.00438EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.28 views

Microsoft Office Word 缓冲区错误漏洞

Microsoft Office Word is a word processing software developed by Microsoft and open sourced. There are security vulnerabilities in Microsoft Office Word. Attackers can exploit these vulnerabilities to obtain sensitive information. The following products and versions are affected: Microsoft 365 Ap...

3.3CVSS5.8AI score0.00385EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.21 views

Microsoft Excel for Android 权限许可和访问控制问题漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is an access control error vulnerability in Microsoft Office. Attackers utilize this...

7.1CVSS5.9AI score0.00428EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.20 views

Microsoft Office Word 缓冲区错误漏洞

Microsoft Office Word is a word processing software developed by Microsoft and open sourced in the United States. There is a buffer error vulnerability in Microsoft Office Word. Attackers can exploit this vulnerability to execute code remotely. The following products and versions are affected:...

7.8CVSS5.9AI score0.00372EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/06/08 11:37 a.m.184 views

Exploit for Integer Overflow or Wraparound in Microsoft

CVE-2023-21716 — Microsoft Word RTF fonttbl Heap Corruption RC...

9.8CVSS8.2AI score0.82302EPSS
SaveExploits11
EUVD
EUVD
added 2026/06/08 1:55 a.m.22 views

EUVD-2022-56000

WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting null byte injection in the path parameter. Attackers can send GET requests to download-csv.php with a crafted path parameter containing...

6.9CVSS5.6AI score0.00342EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/08 1:55 a.m.10 views

CVE-2022-50953

WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting null byte injection in the path parameter. Attackers can send GET requests to download-csv.php with a crafted path parameter containing...

6.9CVSS5.6AI score0.00342EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/08 1:55 a.m.12 views

CVE-2022-50953 WordPress Plugin admin-word-count-column 2.2 Local File Read

WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting null byte injection in the path parameter. Attackers can send GET requests to download-csv.php with a crafted path parameter containing...

6.9CVSS5.6AI score0.00342EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/08 1:55 a.m.37 views

CVE-2022-50953

The CVE concerns the WordPress plugin admin-word-count-column version 2.2 . A vulnerability allows unauthenticated local file read via crafted requests to download-csv.php, exploiting a null byte injection in the path parameter to bypass restrictions and read arbitrary files (e.g., system configu...

6.9CVSS5.6AI score0.00342EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/08 12:00 a.m.50 views

PT-2026-47231

WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting null byte injection in the path parameter. Attackers can send GET requests to download-csv.php with a crafted path parameter containing...

6.9CVSS5.6AI score0.00342EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/08 12:00 a.m.23 views

PT-2026-47710

CVE-2024-56123 - Microsoft Word XML External Entity Injection CVE ID :CVE-2024-56123 Published : June 8, 2026, 10:16 a.m. | 44 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for more details,...

5.3AI score
SaveExploits0References1
Rows per page
Query Builder