CVE Vulnerability Catalog

A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated stack memory region.

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.

Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. The flaw involves making security decisions based on data that cannot be trusted.

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.

A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated stack memory region.

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set another account's identifier and take over that account.

EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.

The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.

EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.

EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a malicious update.