Sponsored Partner · Sample
CrowdStrike Falcon â AI-Native Endpoint ProtectionVulnerability disclosures and security updates affecting Windows Server, Microsoft Exchange, Active Directory, Azure, and Office 365.
Recommended Protective Controls for Microsoft Environments
Deploy continuous behavioral telemetry and micro-segmentation boundaries to shield Microsoft assets.
phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by the mutable preferred_username... This is a medium threat mapped to CVE-2026-111895; security leaders should validate exposure, prioritize patching, and verify compensa...
Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allo... This is a medium threat mapped to CVE-2026-96542; security leaders should validate exposure, prioritize patching, and verify compensa...
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. This is a medium threat mapped to CVE-2026-108455; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. This is a medium threat mapped to CVE-2026-108454; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. This is a medium threat mapped to CVE-2026-108453; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108452; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108451; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108450; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108449; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108448; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108447; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108446; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108445; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108444; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108443; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108442; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108441; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108440; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108439; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. This is a medium threat mapped to CVE-2026-108438; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108437; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. This is a medium threat mapped to CVE-2026-108436; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. This is a medium threat mapped to CVE-2026-108435; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. This is a medium threat mapped to CVE-2026-108434; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. This is a high threat mapped to CVE-2026-108433; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108432; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108431; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108430; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108429; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108428; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108427; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This is a high threat mapped to CVE-2026-108426; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP an... This is a high threat mapped to CVE-2026-105036; security leaders should validate exposure, prioritize patching, and verify compensat...
Recommended Tool
Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to pr... This is a low threat mapped to CVE-2026-104025; security leaders should validate exposure, prioritize patching, and verify compensati...
Audit Microsoft against SIG Lite controls, SOC 2 dealbreakers, and TPRM governance tiers.
Determine CISA BOD 22-01 & SOC 2 patch deadlines for active Microsoft CVEs.
Prepare war room and executive escalation communications in the event of supply-chain compromise.
Subscribe to the SecOps Pulse executive threat briefing for early warnings on unpatched vulnerabilities.
Top critical & high-severity threats, every week.
No spam. Unsubscribe anytime. SecOpsPulse may include sponsored security tool recommendations.