CVE-2026-108454 Microsoft Office PowerPoint Information Disclosure Vulnerability
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-108454 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-108453 Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-108453 Microsoft US
· zachyceno
CVE-2026-108452 Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108452 Microsoft US
· zachyceno
CVE-2026-108451 Microsoft Office Word Remote Code Execution Vulnerability
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108451 Microsoft US
· zachyceno
CVE-2026-108450 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108450 Microsoft US
· zachyceno
CVE-2026-108449 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108449 Microsoft US
· zachyceno
CVE-2026-108448 Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.00 CVSS 7.5 CVE-2026-108448 Microsoft US
· zachyceno
CVE-2026-108447 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108447 Microsoft US
· zachyceno
CVE-2026-108446 Microsoft Office Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108446 Microsoft US
· zachyceno
CVE-2026-108445 Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108445 Microsoft US
· zachyceno
CVE-2026-108444 Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108444 Microsoft US
· zachyceno
CVE-2026-108443 Microsoft Office Word Remote Code Execution Vulnerability
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108443 Microsoft US
· zachyceno
CVE-2026-108442 Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108442 Microsoft US
· zachyceno
CVE-2026-108441 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108441 Microsoft US
· zachyceno
CVE-2026-108440 Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108440 Microsoft US
· zachyceno
CVE-2026-108439 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108439 Microsoft US
· zachyceno
CVE-2026-108438 Microsoft Office Word Information Disclosure Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-108438 Microsoft US
· zachyceno
CVE-2026-108437 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108437 Microsoft US
· zachyceno
CVE-2026-108436 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-108436 Microsoft US
· zachyceno
CVE-2026-108435 Microsoft Office Word Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-108435 Microsoft US
· zachyceno
CVE-2026-108434 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-108434 Microsoft US
· zachyceno
CVE-2026-108433 Microsoft Office Word Security Feature Bypass Vulnerability
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
EPSS 0.00 CVSS 7.8 CVE-2026-108433 Microsoft US
· zachyceno
CVE-2026-108432 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108432 Microsoft US
· zachyceno
CVE-2026-108431 Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108431 Microsoft US
· zachyceno
CVE-2026-108430 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108430 Microsoft US
· zachyceno
CVE-2026-108429 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108429 Microsoft US
· zachyceno
CVE-2026-108428 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108428 Microsoft US
· zachyceno
CVE-2026-108427 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108427 Microsoft US
· zachyceno
CVE-2026-108426 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108426 Microsoft US
· zachyceno
SPOJENO PŘES CVE Vulnérabilité dans les produits Microsoft (15 octobre 2026)
Une vulnérabilité a été découverte dans les produits Microsoft. Elle permet à un attaquant de provoquer une élévation de privilèges.
EPSS 0.01 CVE-2026-88164 Microsoft FR US
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
In this article Uncovering the shadow world of a phishing kit ecosystem Storm-3119: YAM Store, the power broker Storm-2990: The Iron Man System phishing kit Downstream activity from Storm-2990 phishing kits Mitigation and protection guidance Microsoft Defender detections Over the past year, Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators, developers, and an illicit marketplace selling tools and infrastructure for large-scale…
Update Windows: Record Patch Tuesday fixes flaw already under attack
Microsoft’s October Patch Tuesday release addresses a record-breaking 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other publicly disclosed flaws. Just when you thought a previous record would stand for a while, Microsoft comes out again with the largest monthly Patch Tuesday release. Microsoft has said its growing use of AI to find and fix security vulnerabilities means users should expect more fixes in its monthly updates. How to apply patches and…
Microsoft US
Microsoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator protection" security feature is enabled. [...]
Microsoft US
Aggiornamenti Mensili Microsoft
Microsoft ha rilasciato gli aggiornamenti di sicurezza mensili che risolvono un totale di 1416 nuove vulnerabilità, di cui una di tipo 0-day.
Microsoft IT
Security Alert: Microsoft Releases October 2026 Security Updates
Microsoft JP
· zachyceno
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Classification: Critical, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 9.8, CVEs: CVE-2026-70098, CVE-2026-102855, CVE-2026-102238, CVE-2026-102235, CVE-2026-102234, CVE-2026-97844, CVE-2026-97843, CVE-2026-97842, CVE-2026-97841, CVE-2026-97840, CVE-2026-97839, CVE-2026-97838, CVE-2026-97837, CVE-2026-97836, CVE-2026-97835, CVE-2026-97834, CVE-2026-97833, CVE-2026-97832, CVE-2026-97831, CVE-2026-97830 (+1364 other associated CVEs), Summary: Today is Microsoft's October 2026…
CVSS 9.8 Microsoft FI
· zachyceno
Multiples vulnérabilités dans les produits Microsoft (14 octobre 2026)
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Microsoft FR
· zachyceno
Multiples vulnérabilités dans Microsoft Azure (14 octobre 2026)
De multiples vulnérabilités ont été découvertes dans Microsoft Azure. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
EPSS 0.01 CVE-2026-100207 CVE-2026-69877 CVE-2026-85891 CVE-2026-85922 CVE-2026-85925 CVE-2026-88094 CVE-2026-88132 CVE-2026-96204 Microsoft FR
· zachyceno
SPOJENO PŘES CVE Multiples vulnérabilités dans Microsoft Windows (14 octobre 2026)
De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance. Microsoft indique que la vulnérabilité CVE-2026-96951...
KEV ✓ EPSS 0.10 CVE-2026-96951 Microsoft FR US CA
· zachyceno
Multiples vulnérabilités dans Microsoft .Net (14 octobre 2026)
De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Microsoft FR
· zachyceno
Multiples vulnérabilités dans Microsoft Office (14 octobre 2026)
De multiples vulnérabilités ont été découvertes dans Microsoft Office. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données. Microsoft indique que la vulnérabilité...
Microsoft FR
Patch Tuesday - October 2026
Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has noted over the course of 2026, there is every reason to suppose that vulnerability volumes will continue to rise. Microsoft is aware of exploitation in the wild for just one of the vulnerabilities published today, as well…
Microsoft US
Microsoft Patch Tuesday, October 2026 Security Update Review
Microsoft has released its October 2026 Patch Tuesday security updates, addressing vulnerabilities across its products and services. As organizations continue to navigate an evolving threat landscape, applying security patches promptly remains critical to reducing exposure and strengthening security posture. This month’s updates highlight the importance of identifying affected assets, prioritizing remediation, and staying ahead of emerging risks. This Patch Tuesday is Microsoft’s largest…
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical." Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-96951 is a security feature bypass vulnerability that affects Windows Shell. The shared weakness is Improper Neutralization of Special Elements used in a Command ('Command Injection'). The vulnerability…
Microsoft US
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. [...]
Microsoft US
The October 2026 Security Update Review
Another month of patches equals another new record for Microsoft patches. It’s a good thing I survive Pwn2Own Ireland, because between these and the Adobe patches, there’s much to discuss. I’m also looking at different ways I can represent the bugs at this level of volume, so let me know if you have ideas. (Seriously – I’m out of ideas). If you’d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted…
October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today's patch Tuesday, and one is already exploited. CVE-2026-96951: An already exploited Windows Shell Security Feature Bypass Vulnerability. This vulnerabliity allows bypassing the "Mark of the Web" making it easier to exeucte code by sending a malicious message to a user via e-mail or…
Microsoft US
NCSC-2026-0426 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Tools
Microsoft heeft kwetsbaarheden verholpen in diverse componenten van de Developer Tools, zoals .NET en Visual Studio. Een kwaadwillende kan aanvallen uitvoeren die kunnen leiden tot de categoriën schade zoals weergegeven in de onderstaande tabellen. .NET: |------------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |------------------|------|-------------------------------------| | CVE-2026-58280 | 7.50 | Denial-of-Service | | CVE-2026-66822 | 5.90 | Toegang tot…
Microsoft NL
NCSC-2026-0425 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft System Center
Microsoft heeft kwetsbaarheden verholpen in de Configuration Manager en Defender. Een lokale kwaadwillende kan de kwetsbaarheden misbruiken om zich verhoogde rechten toe te kennen en mogelijk toegang te krijgen tot gevoelige gegevens. Microsoft Configuration Manager: |------------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |------------------|------|-------------------------------------| | CVE-2026-88075 | 8.80 | Verkrijgen van verhoogde rechten | |----------…
EPSS 0.01 CVE-2026-102204 CVE-2026-70264 CVE-2026-88075 Microsoft NL
NCSC-2026-0424 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Dynamics
Microsoft heeft kwetsbaarheden verholpen in diverse Dynamics componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorieën schade zoals benoemd in onderstaande tabellen: Microsoft Dataverse: |------------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |------------------|------|-------------------------------------| | CVE-2026-88131 | 9.80 | Uitvoeren van willekeurige code | |------------------|---…
EPSS 0.02 CVE-2026-100214 CVE-2026-102226 CVE-2026-102848 CVE-2026-105727 CVE-2026-105728 CVE-2026-70213 CVE-2026-88131 Microsoft NL
NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft 1159 kwetsbaarheden verholpen in Windows. Het voert te ver om iedere kwetsbaarheid te benoemen. De 53 ernstigste kwetsbaarheden, met een CVSS score van 9 en hoger zijn weergegeven in onderstaande lijst en geven een kwaadwillende de mogelijkheid om zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen en willekeurige code uit te voeren. Deze kwetsbaarheden bevinden zich in diverse subcomponenten van Windows. Voor daadwerkelijk misbruik hoeft geen…
Microsoft NL
NCSC-2026-0422 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Office
Microsoft heeft xxx kwetsbaarheden verholpen in diverse Office producten, zoals Word, Excel, Access, Outlook, Visio, Sharepoint en PowerPoint, maar ook subcomponenten als Shell, Azure Key Vault en Click-to-Run. Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en toegang te krijgen tot gevoelige informatie in de context van het slachtoffer. Voor succesvol misbruik moet de…
Microsoft NL
NCSC-2026-0421 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Azure
Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten, zoals Key Vault, DevOps, API center en Storage. Een kwaadwillende kan de kwetsbaarheden misbruiken om beveiligingsmaatregelen te omzeilen, zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en toegang te krijgen tot gevoelige gegevens. De kwetsbaarheden met kenmerk CVE-2026-83943, CVE-2026-96207, CVE-2026-69435 en CVE-2026-83947 zijn reeds centraal door Microsoft verholpen en vereisen geen verdere acties.…
EPSS 0.01 CVE-2026-69435 CVE-2026-83943 CVE-2026-83947 CVE-2026-96207 Microsoft NL
NCSC-2026-0420 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft SQL Server
Microsoft heeft kwetsbaarheden verholpen in SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, zich verhoogde rechten toe te kennen, willekeurige code uit te voeren, mogelijk met rechten van de SQL server en toegang te krijgen tot gevoelige gegevens.
Microsoft NL
SPOJENO PŘES CVE NCSC-2026-0419 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Excange Server
Microsoft heeft kwetsbaarheden verholpen in Exchange. Een kwaadwillende kan de kwetsbaarheden misbruiken om zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen en willekeurige code uit te voeren met rechten van het proces. Van de kwetsbaarheid met kenmerk CVE-2026-96940 is eerder al een out-of-band update verschenen, maar is ook opgenomen in deze cumulatieve update.
EPSS 0.03 CVSS 8.8 CVE-2026-96940 Microsoft NL FI CA FR US
· zachyceno
CVE-2026-97781 Microsoft Office OneNote Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97781 Microsoft US
· zachyceno
CVE-2026-105016 Microsoft QUIC Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
EPSS 0.02 CVE-2026-105016 Microsoft US
· zachyceno
CVE-2026-108136 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-108136 Microsoft US
· zachyceno
CVE-2026-97816 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-97816 Microsoft US
· zachyceno
CVE-2026-97811 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-97811 Microsoft US