KLA91147 Multiple vulnerabilities in Microsoft Office

🗓️ 14 Jul 2026 00:00:00Reported by Kaspersky LabType

kaspersky

kaspersky🔗 threats.kaspersky.com👁 21 Views

Microsoft Office has multiple vulnerabilities enabling remote code execution and disclosure.

Reporter	Title	Published	Views	Family All 372
ATTACKERKB	CVE-2026-54988	14 Jul 202617:05	–	attackerkb
ATTACKERKB	CVE-2026-50675	14 Jul 202617:05	–	attackerkb
ATTACKERKB	CVE-2026-50678	14 Jul 202617:05	–	attackerkb
ATTACKERKB	CVE-2026-54108	14 Jul 202617:05	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft Excel’s spreadsheet editor, related to reading data outside of the allowed range in memory, allows a hacker to disclose protected information.	15 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.	16 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages involves a calculated loss of significance, allowing an attacker to execute arbitrary code.	17 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to data type mixing errors, allowing an attacker to execute arbitrary code.	17 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.	17 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise allow attackers to execute arbitrary code.	17 Jul 202600:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47290
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47642
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48580
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50301
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50387
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50408
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50665
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50675
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50678
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54108

30 Jul 2026 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17.8 - 8.7

EPSS0.01921

SSVC

remote code execution information disclosure spoofing privilege escalation microsoft office