5932 matches found
Server-Side Request Forgery (SSRF) in Craft CMS with Asset Uploads Mutations
Required Permissions The exploitation requires a few permissions to be enabled in the used GraphQL schema: "Edit assets in the volume" "Create assets in the volume" Details The implementation fails to restrict the URL Scheme. While the application is intended to "upload assets", there is no...
Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent Vulnerabilities
Microsoft has released its monthly security update for April 2026, which includes 165 vulnerabilities affecting a wide range of products, including eight Microsoft marked as "critical." CVE-2026-23666 is a critical Denial of Service DoS vulnerability that affects the .NET framework. Successful...
EUVD-2026-22639
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
EUVD-2026-22631
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...
EUVD-2026-22633
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
EUVD-2026-22615
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
EUVD-2026-22361
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-33822
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-33115
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-33114
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-33095
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-23657
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-33115 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-33115
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-33115 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-33115
CVE-2026-33115 is a use-after-free vulnerability in Microsoft Word (Office) that allows a local attacker to execute arbitrary code. The issue is triggered when a user opens a malicious Word document, causing memory corruption and code execution on the affected system. Connected sources (PT-2026-3...
CVE-2026-33114 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-33114
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-33114
CVE-2026-33114 affects Microsoft Word in the Office suite via an untrusted pointer dereference in Word that enables local arbitrary code execution when a user opens a crafted document. The vulnerability is categorized as high impact (local code execution, high confidentiality/integrity/availabili...