Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
CVE-2026-83498
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to el
2026-09-09 归档
今日共收录 1483 条安全情报，包含 593 个 CVE，506 篇安全通告，以及 97 篇研究论文。
← 返回归档列表Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability
CVE-2026-84003
Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized at
Windows WebClient Service Elevation of Privilege Vulnerability
CVE-2026-72965
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-83949
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2026-69530
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a ne
Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-83951
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
CVE-2026-83501
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose info
ASP.NET Core Denial of Service Vulnerability
CVE-2026-57099
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service ove
Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-85875
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
.NET Elevation of Privilege Vulnerability
CVE-2026-69806
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges l
.NET Elevation of Privilege Vulnerability
CVE-2026-69805
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-69904
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information
Windows Storage Information Disclosure Vulnerability
CVE-2026-78516
Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-81948
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-81949
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Microsoft Graphics Component Remote Code Execution Vulnerability
CVE-2026-84000
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-69464
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-81388
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Microsoft Excel Information Disclosure Vulnerability
CVE-2026-81395
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-81960
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.