CVE-2026-45492Medium· 5.4▾ SunlitImproper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
edge_chromium < 148.0.3967.70Upgrade past the affected range:
edge_chromium 148.0.3967.70Connected by shared product, vendor, weakness, or advisory.
CVE-2026-45495High· 8.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-108427High· 8.8Microsoft Office Word Remote Code Execution Vulnerability
CVE-2016-0025High· 7.3Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2…
CVE-2026-45494Medium· 5.4Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-97805Critical· 9.8Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
CVE-2015-2466Critical· 9.3Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka "Microsoft Office Remote Code Execution Vulnerability."