Month: July 2026

Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-50359 Microsoft XML Core Services Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-56156 Microsoft Excel Remote Code Execution Vulnerability→

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-55947 Microsoft Excel Remote Code Execution Vulnerability→

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. Continue reading CVE-2026-55898 Microsoft Excel Information Disclosure Vulnerability→

Improper neutralization of special elements used in a command (‘command injection’) in Outlook Copilot allows an authorized attacker to perform tampering over a network. Continue reading CVE-2026-55145 Outlook Copilot Tampering Vulnerability→

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-50468 Microsoft SQL Server Information Disclosure Vulnerability→

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-55052 Microsoft SharePoint Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-55123 Microsoft PowerPoint Remote Code Execution Vulnerability→