Vulnerabilities
Microsoft Fixes High-Severity Access Heap Overflow in Office Apps
A heap-based buffer overflow in Office Access enables remote code execution. Microsoft has released patches for Enterprise and LTSC deployments.
Remote Code Execution
Everything TechSec Observer has reported about Remote Code Execution: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVSS 9.8: Printcart Store Google Drive Endpoint Flaw Enables Unauthenticated RCE on v2.9.1
A critical flaw in the Printcart Store plugin allows attackers to upload malicious files and execute code on servers running versions up to 2.9.1 without needing valid credentials.
Vulnerabilities
NVD Rates Square Squash YAML Flaw Critical 9.2 CVSS Score for Unauthenticated RCE
Unauthenticated attackers can exploit CVE-2026-109391 to execute arbitrary Ruby code in Square Squash via crafted YAML input.