HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-69739 — Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclo...

·Source: NIST NVD

Updated:

Executive Summary

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

Analysis

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. CVSS Score: 6.5. Published: 2026-09-08T18:19:46.113.

Indicators of Compromise (1)

CVE (1)
CVE-2026-69739
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 8, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-72710 — SPIP before 4.4.18 contains a remote code execution vulnerability in the editer_...

SPIP before 4.4.18 contains a remote code execution vulnerability in the editer_objet action where the arg parameter resolves SQL table names without enforcing an editable columns allowlist, allowing attackers with a valid nonce to inject attacker-controlled rows into the spip_jobs table. Attackers can supply arg=job/0 with crafted fonction and args values, which are later unserialized and execute

CVE-2026-72710
NIST NVD
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-72709 — SPIP before 4.4.18 contains a missing authorization vulnerability in the adminis...

SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauthenticated attackers to perform privileged actions by supplying a valid HMAC-SHA256 nonce without any server-side permission check via autoriser(). Attackers can obtain a valid nonce, compute it for any action as the anonymous user, and invoke the editer_au

CVE-2026-72709
NIST NVD
CRITICALVulnerability

GitLab Vulnerability Exploited One Day After Disclosure

The critical-severity path traversal flaw allows unauthenticated attackers to read arbitrary files from the GitLab server. The post GitLab Vulnerability Exploited One Day After Disclosure appeared first on SecurityWeek .

SecurityWeek