vulnerabilities present in Microsoft Office

🗓️ 08 Sep 2026 18:48:41Reported by NCSCType

ncsc🔗 advisories.ncsc.nl👁 18 Views

114 vulnerabilities in Microsoft Office, four critical (CVSS 9.8) enabling unauthenticated code execution.

Reporter	Title	Published	Views	Family All 1000
BDU FSTEC	The vulnerability of the Skype for Business Server’s instant messaging program, related to improper external management of file names or paths, allows a hacker to execute arbitrary code.	11 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Skype for Business Server’s instant messaging program, related to the possibility of using client-side authentication, allows attackers to carry out spoofing attacks.	18 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Skype for Business Server’s instant messaging program, related to a countable loss of significance, allows a perpetrator to trigger a service failure.	18 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Skype for Business Server’s instant messaging program, related to insufficient validation of requests on the server side, allows attackers to disclose protected information.	18 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.	21 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.	21 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Skype for Business Server’s instant messaging program, related to errors in verifying cryptographic signatures, allows attackers to carry out spoofing attacks.	21 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.	28 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	28 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	28 Sep 202600:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/en-us/security-guidance

08 Sep 2026 18:48Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.8 - 9.8

EPSS0.01288

SSVC

Microsoft Office code execution unauthenticated critical severity malicious file multiple components