In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

Vim: Heap Buffer Overflow in spell file loading

opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response

Mistune Image Directive CSS Injection Vulnerability

Mistune TOC Anchor Injection XSS

Mistune Heading ID Attribute Injection XSS

Mistune: XSS via unescaped figclass/figwidth in Figure directive

WebOb: Location header normalization during redirect leads to open redirect

eml_parser: Recursion DoS via nested message/rfc822 attachments

RabbitMQ: Unsanitized vhost names allow for XSS in management UI

Microsoft Office Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Office Information Disclosure Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

DHCP Client Service Remote Code Execution Vulnerability

Windows DWM Core Library Information Disclosure Vulnerability