Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-78524
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
2026-10-31 归档
今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-77911
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
CVE-2026-77491
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73013
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVE-2026-71328
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
CVE-2026-70125
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-69806
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges l
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-69767
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69610
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-69609
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
CVE-2026-69576
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69499
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a netwo
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69439
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a networ
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-69304
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-68880
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-64918
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a netw
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-62804
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-58649
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then calls randomize with an empty output buffer while the ge...
CVE-2026-118765
Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then
Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit-mode sidebar parses component language strings as HTML rather tha...
CVE-2026-118252
Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit-mode sid