CVE Vulnerability Catalog

A path traversal vulnerability in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

A use-after-free vulnerability in the Linux MANA driver allows an authorized attacker to elevate privileges locally.

A heap-based buffer overflow vulnerability has been found in Microsoft Office. An unauthorized attacker can exploit this vulnerability to execute code locally.

Use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

An untrusted pointer dereference vulnerability has been found in Microsoft Office Word. An unauthorized attacker can exploit this vulnerability to execute code locally.

Integer underflow (wrap or wraparound) vulnerability in Microsoft Office Excel. An unauthorized attacker can exploit this flaw to execute code locally.

Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.

Use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.

A use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.

Out-of-bounds read vulnerability in Microsoft Office Word. An unauthorized attacker can exploit this flaw to execute code locally.

A type confusion vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.

Use-after-free vulnerability in OpenSSL during PKCS#7 or S/MIME signature verification. A specially crafted message can cause incorrect freeing of a BIO object, leading to process crashes, heap corruption, or potentially remote code execution.

A vulnerability in OpenSSL causes the supplied IV to be silently discarded when using the EVP_Cipher() one-shot interface for AES-OCB. Every message encrypted with the same key uses the same effective nonce, leading to loss of confidentiality and enabling authentication tag forgery.

A heap-based buffer overflow vulnerability has been found in Microsoft Office. An unauthorized attacker can exploit this vulnerability to execute code locally.

Numeric truncation error vulnerability in Microsoft Office Excel. An unauthorized attacker can exploit this flaw to execute code locally.

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read vulnerability in Microsoft Office Excel. An unauthorized attacker can exploit this flaw to execute code locally.

A heap-based buffer overflow vulnerability has been found in Microsoft Office. An unauthorized attacker can exploit this vulnerability to execute code locally.