Threat database

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Access of resource using incompatible type ('type confusion') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Red Hat has issued a security advisory for Grafana in Red Hat Enterprise Linux 9 addressing multiple vulnerabilities in Go components used by Grafana. The fixes include a certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810), a denial of service vulnerability in certificate chain building (CVE-2026-32280), and a cross-site scripting vulnerability via HTML parsing bypass (CVE-2026-27136). The update also includes bug fixes and enhancements related to the Grafana build. These issues have been rated with an important security impact by Red Hat.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.