Live Threat Intelligence Radar

CVE-2026-109468 is a high-severity vulnerability in Microsoft Visual Studio 2022 version 17.14 that involves allocation of resources without limits or throttling in ASP.NET Core. This flaw allows an unauthorized attacker to cause a denial of service (DoS) over a network by exhausting resources. The vulnerability affects multiple version ranges of Visual Studio 2022 and related products. An official fix is available from Microsoft.

CVE-2026-108455 is an information disclosure vulnerability in Microsoft Office PowerPoint within Microsoft 365 Apps for Enterprise. It is caused by an out-of-bounds read (CWE-125) that could allow an attacker to access sensitive information. The vulnerability has a medium severity with a CVSS score of 6.5. An official fix is available from Microsoft. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise prior to the fixed versions.

CVE-2026-108454 is a medium severity buffer over-read vulnerability in Microsoft Office PowerPoint within Microsoft 365 Apps for Enterprise. It can lead to information disclosure without requiring privileges but does require user interaction. An official fix is available from Microsoft.

CVE-2026-108453 is a medium severity vulnerability in Microsoft 365 Apps for Enterprise, specifically affecting Microsoft Office PowerPoint. It is an out-of-bounds read (CWE-125) vulnerability that could lead to information disclosure. The vulnerability requires user interaction but no privileges and has no impact on integrity or availability. An official fix is available from Microsoft.

CVE-2026-108452 is a high-severity path traversal vulnerability in Microsoft SharePoint Server Subscription Edition. It allows an authorized attacker to execute code remotely by improperly limiting pathname access to restricted directories. The vulnerability affects versions from 16.0.0 up to but not including 16.0.20326.20190. An official fix is available from Microsoft.

CVE-2026-108451 is a numeric truncation error vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released an official fix for this issue. No known exploits are currently reported in the wild.

CVE-2026-108450 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. An official fix is available from Microsoft, and the vendor manages remediation for this cloud-hosted service.

CVE-2026-108449 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 8.8. Microsoft has issued an official fix for this vulnerability. No known exploits are currently reported in the wild.

CVE-2026-108448 is a heap-based buffer overflow vulnerability in Microsoft Office Outlook, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 7.5. Microsoft has released an official fix to address this issue. No known exploits are reported in the wild at this time.

CVE-2026-108447 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has issued an official fix for this vulnerability. No known exploits are reported in the wild at this time.