5932 matches found
CVE-2026-20948
The CVE-2026-20948 entry affects Microsoft Word (Office Word). It is described as an Untrusted pointer dereference in Microsoft Office Word that allows an unauthorized attacker to execute code locally (remote code execution). The issue is evidenced by multiple sources, with a CVSS v3.1 base score...
CVE-2026-20944
CVE-2026-20944 describes an out-of-bounds read in Microsoft Word that could let an unauthenticated attacker execute code locally. The vulnerability affects Microsoft Word components in Office installations (Word/Word-related Word processing components) and is listed with a high impact (CVSS 3.1: ...
CVE-2026-20944 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-20944 Microsoft Word Remote Code Execution Vulnerability
...
Description of the security update for SharePoint Server 2016 Language Pack: January 13, 2026 (KB5002827)
None None...
Microsoft Word Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally...
End of support for Office 2016 and Office 2019
None None...
Microsoft Word Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...
Microsoft Word 缓冲区错误漏洞
Microsoft Word is a word processing software in the Office suite from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Word. An attacker could exploit this vulnerability to remotely execute code. The following products and versions are affected: Microsoft 365 Apps for...
Microsoft Word 安全漏洞
Microsoft Word is a word processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Word. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are affected:Microsoft SharePoint Enterprise...
PT-2026-2748
CVE-2026-20948 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. https://t.co/RWIO4Ijxeo...
Security Updates for Microsoft Word Products (January 2026)
The Microsoft Word Products are missing a security update. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2026-20948 Note that Nessus has not tested for this issue but h...
PT-2026-2745
Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read issue exists in Microsoft Office Word, potentially allowing an unauthorized attacker to execute code locally. Recommendations At the moment, there is no...
MuddyWater Launches RustyWater RAT via Spear-Phishing Across Middle East Sectors
The Iranian threat actor known as MuddyWater has been attributed to a spear-phishing campaign targeting diplomatic, maritime, financial, and telecom entities in the Middle East with a Rust-based implant codenamed RustyWater. "The campaign uses icon spoofing and malicious Word documents to deliver...
CVE-2026-22712
Improper Encoding or Escaping of Output due to magic word replacement in ParserAfterTidy vulnerability in The Wikimedia Foundation Mediawiki - ApprovedRevs Extension allows Input Data Manipulation.This issue affects Mediawiki - ApprovedRevs Extension: 1.45, 1.44, 1.43, 1.39...
CVE-2025-15492 RainyGao DocSys GroupMemberMapper.xml sql injection
A vulnerability was detected in RainyGao DocSys up to 2.02.36. The affected element is an unknown function of the file src/com/DocSystem/mapping/GroupMemberMapper.xml. Performing a manipulation of the argument searchWord results in sql injection. It is possible to initiate the attack remotely. Th...
CVE-2021-0313
In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions:...
CVE-2025-23577
Cross-Site Request Forgery CSRF vulnerability in Sourov Amin Word Freshener word-freshener allows Stored XSS.This issue affects Word Freshener: from n/a through = 1.3...
CVE-2024-41165
A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of th...
CVE-2026-22712
Improper Encoding or Escaping of Output due to magic word replacement in ParserAfterTidy vulnerability in The Wikimedia Foundation Mediawiki - ApprovedRevs Extension allows Input Data Manipulation.This issue affects Mediawiki - ApprovedRevs Extension: 1.45, 1.44, 1.43, 1.39...