|
221
|
8.8 |
HIGH
Network
|
-
|
-
|
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
New
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-45504
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222
|
5.0 |
MEDIUM
Network
|
-
|
-
|
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.
New
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-45502
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223
|
6.1 |
MEDIUM
Network
|
-
|
-
|
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-45500
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224
|
6.2 |
MEDIUM
Local
|
-
|
-
|
Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.
New
|
CWE-59
Link Following
|
CVE-2026-45491
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
225
|
7.8 |
HIGH
Local
|
-
|
-
|
Improper authorization in .NET allows an authorized attacker to elevate privileges locally.
New
|
CWE-285
Improper Authorization
|
CVE-2026-45490
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
226
|
7.8 |
HIGH
Local
|
-
|
-
|
Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
New
|
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
|
CVE-2026-45487
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
227
|
7.8 |
HIGH
Local
|
-
|
-
|
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
New
|
CWE-416
Use After Free
|
CVE-2026-45486
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
228
|
3.3 |
LOW
Local
|
-
|
-
|
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
New
|
CWE-125
Out-of-bounds Read
|
CVE-2026-45485
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
229
|
8.8 |
HIGH
Network
|
-
|
-
|
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
New
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2026-45484
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
230
|
4.6 |
MEDIUM
Network
|
-
|
-
|
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Project Server allows an authorized attacker to perform spoofing over a network.
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-45483
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|