🔹 CVE-2026-108442

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🔹 CVE-2026-108441

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🔹 CVE-2026-108440

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🔹 CVE-2026-108439

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🔹 CVE-2026-108438

Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

🔹 CVE-2026-108437

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🔹 CVE-2026-108436

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

🔹 CVE-2026-108435

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

🔹 CVE-2026-108434

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

🔹 CVE-2026-108433

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

🔹 CVE-2026-108432

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🔹 CVE-2026-108431

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🔹 CVE-2026-108430

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🔹 CVE-2026-108429

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🔹 CVE-2026-108428

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🔹 CVE-2026-108427

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🔹 CVE-2026-108426

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

🔹 CVE-2026-111380

FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which compute the audio queue buffer size as FramesPerPacket * 2 * nChannels in UINT32 arithmetic, bypassing the CVE-2026-91962 fix. A malicious RDP server can send FramesPerPacket of 2^30 in the audin Open PDU to wrap the multipli...

🔹 CVE-2026-111379

FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local attackers to corrupt memory by supplying a crafted v3 persistent cache file. Attackers can set large width and height values that wrap the size calculation in persist_cache_get_data, causing fread to overflow an undersized buffer ...

🔹 CVE-2026-111378

FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffer growth before NLA authentication.

🔹 CVE-2026-111377

FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits. Authenticated clients can start a static virtual channel message, withhold the LAST flag, and send endless fragments to exhaust server memory.