Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.
Automate backups, sharing, and file management for your business with a cloud storage CLI that protects your data with end-to-end encryption.
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
The investigation shows that North Koreans are able to infiltrate government agencies, as well as private organizations and crypto exchanges.
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
The FBI is warning that criminals are breaking into social media to steal and distribute non-consensual intimate images and videos.
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Mozilla announced today that it updated the GPG key used to sign Firefox and Thunderbird releases after it was accidentally exposed on GitHub. [...]
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
AI agents can improvise beyond the intended scope of a task when they are given broad access to enterprise systems and data. Token Security explains why organizations need to define agent intent and continuously enforce permissions around what each agent was actually created to do. [...]
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.
OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on vulnerability research, penetration testing, and incident response.
"Built on GPT‑5.6 Sol, it is trained to improve capabilities on several specialized cybersecurity tasks (e.g., finding zero...
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.