256 matches found
CVE-2018-0917
Technical details about CVE-2018-0917 are not publicly provided in the supplied documents; no specifics on affected products, root cause, impact, or remediations are described beyond the initial entry. Monitor for updates.
CVE-2018-1014
CVE-2018-1014 affects Microsoft SharePoint Server. The vulnerability is an elevation of privilege caused by improper sanitization of specially crafted web requests to an affected SharePoint server. Affected component: Microsoft SharePoint Server; root cause: insufficient sanitization in handling ...
CVE-2025-54905
CVE-2025-54905 : Microsoft Word information disclosure vulnerability caused by an untrusted pointer dereference. Exploitation would allow an unauthorized, local attacker to disclose information. The CVE is associated with Microsoft Office Word; CVSS 3.1 base score 7.1 (HIGH) with LOCAL access, us...
CVE-2025-53736
CVE-2025-53736 is a Microsoft Word information-disclosure vulnerability caused by a buffer over-read in Word. Exploitation could allow a local attacker to disclose data from memory. Connected sources confirm Word-specific impact and the existence of product updates addressing this CVE (e.g., KB50...
CVE-2018-1034
Affected product: Microsoft SharePoint Server. Vulnerability: elevation of privilege via a specially crafted web request, caused by improper sanitization of input. Root cause (as described): SharePoint Server does not properly sanitize crafted requests, enabling authenticated attackers to escalat...
CVE-2018-8323
Affected software: Microsoft SharePoint Server (notably SharePoint Enterprise Server variants cited in CNVD entries). Vulnerability: Elevation of privilege caused by improper sanitization of specially crafted web requests to the affected SharePoint server. Root cause / impact: The issue allows an...