Recently updated CVEs

Nov 12, 2026 UTC

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 12, 2026 UTC

Heap-based buffer overflow in PostgreSQL tsvector_delete() allows a database user to execute arbitrary code as the operating system user running the database, via a tsvector whose lexeme data uses a nonstandard but valid ordering that requires additional alignment padding in the …

Nov 12, 2026 UTC

Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Nov 12, 2026 UTC

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 12, 2026 UTC

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Nov 12, 2026 UTC

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 12, 2026 UTC

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 12, 2026 UTC

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Nov 12, 2026 UTC

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Nov 12, 2026 UTC

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Nov 12, 2026 UTC

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Nov 12, 2026 UTC

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 12, 2026 UTC

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Nov 12, 2026 UTC

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Nov 12, 2026 UTC

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.