Количество 396 015
Количество 396 015
CVE-2026-55048
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55047
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55046
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-55045
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55044
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55043
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-55042
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55041
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55040
Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-5503
In TLSX_EchChangeSNI, the ctx->extensions branch set extensions unconditionally even when TLSX_Find returned NULL. This caused TLSX_UseSNI to attach the attacker-controlled publicName to the shared WOLFSSL_CTX when no inner SNI was configured. TLSX_EchRestoreSNI then failed to clean it up because its removal was gated on serverNameX != NULL. The inner ClientHello was sized before the pollution but written after it, causing TLSX_SNI_Write to memcpy 255 bytes past the allocation boundary.
CVE-2026-55039
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55038
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55037
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55036
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55035
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55034
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-55033
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55032
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55031
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55030
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-55048 Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | CVSS3: 7.8 | 0% Низкий | 2 месяца назад |
| CVE-2026-55047 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | CVSS3: 5.5 | 1% Низкий | 2 месяца назад |
| CVE-2026-55046 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | CVSS3: 5.5 | 1% Низкий | 2 месяца назад |
| CVE-2026-55045 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | CVSS3: 8.4 | 0% Низкий | 2 месяца назад |
| CVE-2026-55044 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | CVSS3: 7.8 | 0% Низкий | 2 месяца назад |
| CVE-2026-55043 Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. | CVSS3: 7.8 | 0% Низкий | 2 месяца назад |
| CVE-2026-55042 Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally. | CVSS3: 5.5 | 1% Низкий | 2 месяца назад |
| CVE-2026-55041 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | CVSS3: 7.8 | 0% Низкий | 2 месяца назад |
| CVE-2026-55040 Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. | CVSS3: 9.1 | 51% Средний | 2 месяца назад |
| CVE-2026-5503 In TLSX_EchChangeSNI, the ctx->extensions branch set extensions unconditionally even when TLSX_Find returned NULL. This caused TLSX_UseSNI to attach the attacker-controlled publicName to the shared WOLFSSL_CTX when no inner SNI was configured. TLSX_EchRestoreSNI then failed to clean it up because its removal was gated on serverNameX != NULL. The inner ClientHello was sized before the pollution but written after it, causing TLSX_SNI_Write to memcpy 255 bytes past the allocation boundary. | CVSS3: 9.1 | 0% Низкий | 6 месяцев назад |
| CVE-2026-55039 Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | CVSS3: 7.8 | 0% Низкий | 2 месяца назад |
| CVE-2026-55038 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | CVSS3: 7.8 | 1% Низкий | 2 месяца назад |
| CVE-2026-55037 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | CVSS3: 7.8 | 0% Низкий | 2 месяца назад |
| CVE-2026-55036 Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | CVSS3: 7.8 | 0% Низкий | 2 месяца назад |
| CVE-2026-55035 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | CVSS3: 5.5 | 1% Низкий | 2 месяца назад |
| CVE-2026-55034 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | CVSS3: 7.3 | 1% Низкий | 2 месяца назад |
| CVE-2026-55033 Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. | CVSS3: 7.8 | 1% Низкий | 2 месяца назад |
| CVE-2026-55032 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | CVSS3: 7.8 | 1% Низкий | 2 месяца назад |
| CVE-2026-55031 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | CVSS3: 7.8 | 0% Низкий | 2 месяца назад |
| CVE-2026-55030 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | CVSS3: 4.6 | 1% Низкий | 2 месяца назад |
Уязвимостей на страницу