Security Vulnerabilities
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS Score
5.5
EPSS Score
0.004
Published
2026-09-08
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVSS Score
8.2
EPSS Score
0.003
Published
2026-09-08
Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVSS Score
8.2
EPSS Score
0.003
Published
2026-09-08
Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
CVSS Score
7.4
EPSS Score
0.007
Published
2026-09-08
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.01
Published
2026-09-08
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
CVSS Score
6.5
EPSS Score
0.006
Published
2026-09-08
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-09-08
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS Score
5.5
EPSS Score
0.004
Published
2026-09-08
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVSS Score
8.2
EPSS Score
0.002
Published
2026-09-08
Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVSS Score
8.2
EPSS Score
0.003
Published
2026-09-08