CVE Vulnerability Catalog

An integer underflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability can be exploited by opening a specially crafted Excel file.

A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. The flaw is due to improper neutralization of input during web page generation.

An integer overflow or wraparound vulnerability has been discovered in Microsoft Office Word. This flaw allows an unauthorized attacker to execute code locally.

A Use-After-Free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted documents.

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability can be triggered by opening a specially crafted file.

A type confusion vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The flaw is caused by accessing a resource using an incompatible data type.

A type confusion vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The flaw is caused by accessing a resource using an incompatible data type.

A type confusion vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The flaw arises from accessing a resource using an incompatible type.

A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. The flaw is due to improper neutralization of input during web page generation.

A Use-After-Free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.

A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted data.

A Use-After-Free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted Excel files.

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.

Race condition vulnerability in Windows Runtime. An authenticated attacker can exploit concurrent execution with improper synchronization to elevate privileges locally.

In Windows Terminal, an integer overflow or wraparound vulnerability allows an unauthorized attacker to execute code locally.

An improper authorization vulnerability in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.