5932 matches found
About Remote Code Execution – Microsoft Word (CVE-2026-21514) vulnerability
About Remote Code Execution - Microsoft Word CVE-2026-21514 vulnerability. This vulnerability is from February Microsoft Patch Tuesday. Reliance on Untrusted Inputs in a Security Decision CWE-807 in Microsoft Office Word allows an unauthenticated attacker to bypass OLE security features when...
PT-2026-22306
The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Call to Action' custom fields in all versions up to, and including, 13.4. This is due to insufficient input sanitization and output escaping on user-supplied attributes in th...
CVE-2025-68031
CVE-2025-68031 is a reflected Cross-Site Scripting vulnerability in the WordPress plugin прац farazsms (افزونه پیامک حرفه ای فراز اس ام اس) up to version 2.7.3. The issue is described as Improper Neutralization of Input During Web Page Generation, enabling Reflected XSS. Public sources confirm af...
glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
A flaw was found in glibc. When the wordexp function is called with the flags WRDEREUSE and WRDEAPPEND, it may return uninitialized memory. If the caller inspects the wewordv array or calls the wordfree function to free the allocated memory, the process will abort, resulting in a denial of servic...
CVE-2026-0745
The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.10 due to missing URL validation on the 'downloadlanguage' function. This makes it possible for authenticated attackers, with Administrator-level access and above, ...
Security Updates for Microsoft Word Products C2R (February 2026)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2026-21514 - An information disclosure vulnerability. An attacker can exploit...
CVE-2026-21514
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...
February 2026 Patch Tuesday includes six actively exploited zero-days
Microsoft releases important security updates on the second Tuesday of every month, known as “Patch Tuesday.” This month’s update patches fix 59 Microsoft CVE’s including six zero-days. Let’s have a quick look at these six actively exploited zero-days. Windows Shell Security Feature Bypass...
Patch Tuesday, February 2026 Edition
Microsoft today released updates to fix more than 50 security holes in its Windows operating systems and other software, including patches for a whopping six "zero-day" vulnerabilities that attackers are already exploiting in the wild. Zero-day 1 this month is CVE-2026-21510, a security feature...
CVE-2026-21514
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-21514
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-21514
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-21514 Microsoft Word Security Feature Bypass Vulnerability
...
CVE-2026-21514 Microsoft Word Security Feature Bypass Vulnerability
...
CVE-2026-21514
CVE-2026-21514 — Microsoft Word Security Feature Bypass . A vulnerability in Word arises from reliance on untrusted inputs in a security decision, enabling a local attacker to bypass embedded/active-content protections. Public CVSS data from the Initial document indicates a 3.1 vector with LOCAL ...
Description of the security update for Word 2016: February 10, 2026 (KB5002839)
None None...
Description of the security update for SharePoint Server 2016: February 10, 2026 (KB5002841)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: February 10, 2026 (KB5002836)
None None...
