今日共收录 1958 条安全情报，包含 992 个 CVE，550 篇安全通告，以及 113 篇研究论文。
← 返回归档列表CVE-2026-55034
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
CVE-2026-55033
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55032
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55031
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55030
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
CVE-2026-55029
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55028
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55025
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker
CVE-2026-55024
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker
CVE-2026-55022
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to exe
CVE-2026-55021
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
CVE-2026-55020
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
CVE-2026-55019
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
CVE-2026-55018
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55017
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55016
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
CVE-2026-54131
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-54128
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.
CVE-2026-54125
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an
CVE-2026-54121
Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privile