CVE-2026-88197

A heap-based buffer overflow exists in Microsoft Office , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability affects several products, including Word , Excel , Access , Outlook , Visio , SharePoint , and PowerPoint . To successfully exploit the...

CVE-2026-88202

A heap-based buffer overflow exists in Microsoft Office Word , potentially allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a HIGH severity (CVSS 3.1 score of 8.8). To successfully exploit this, an attacker may require the victim t...

CVE-2026-88196

A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability affects multiple products including Word , Excel , Access , Outlook , Visio , SharePoint , and PowerPoint , as well as subcomponents li...

CVE-2026-88145

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. This vulnerability is caused by underlying issues in how the application handles memory, potentially leading to a complete compromise of the victim's conte...

CVE-2026-88155

A heap-based buffer overflow exists in Microsoft Office SharePoint , which allows an authorized attacker to achieve arbitrary code execution over a network. The vulnerability has a CVSS v3.1 base score of 8.80 (High). Microsoft has released security updates to address this vulnerability; users ar...

CVE-2026-83891

A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability stems from improper input validation and can result in arbitrary code execution within the victim's context. To successfully exploit this, an attacker...

CVE-2026-88156

A stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed as a critical issue with a CVSS 3.1 base score of 9.8 . Exploitation of similar Office vulnerabilities typically requires a vic...

CVE-2026-70301

A heap-based buffer overflow exists in Microsoft Office Word , which could allow an unauthorized attacker to execute arbitrary code over a network. To successfully exploit this vulnerability, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft has...

CVE-2026-70291

A heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a CRITICAL severity score of 9.8 . To exploit these types of vulnerabilities, an attacker typically tricks a victim into opening a ...

CVE-2026-70302

A heap-based buffer overflow vulnerability in Microsoft Office Word allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS v3.1 base score of 8.8 (High) . An attacker could potentially exploit this to perform remote code execution, though specific e...

CVE-2026-70268

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker must typically trick a victim into opening a malicious file or clicking a malicious link. Microsoft has re...

CVE-2026-70282

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Mic...

CVE-2026-70287

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability carries a CVSS v3.1 score of 8.8 (High) , indicating that an attacker could exploit this to execute code with high impact on confidentiality,...

CVE-2026-70256

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact of this vulnerability is rated as HIGH with a CVSS score of 8.8 . Microsoft has released updates to address this i...

CVE-2026-70269

A heap-based buffer overflow vulnerability in Microsoft Office Word allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is associated with CWE-122 and CWE-190 . Microsoft has released official updates to address this flaw. Users are recommended...

CVE-2026-70257

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to execute arbitrary code over a network. The underlying cause involves a heap-based buffer overflow and an integer overflow or wraparound (CWE-122, CWE-190). Impacted system...

CVE-2026-70220

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution locally. To successfully exploit this vulnerability, an attacker must trick the victim into opening a malicious file or clicking a malicious link. Microsoft has released updat...

CVE-2026-70116

A stack-based buffer overflow vulnerability exists in the Windows Resilient File System (ReFS) . This flaw allows an unauthorized attacker to perform a security feature bypass through a physical attack vector. The CVSS 3.1 score is 4.2 (Medium), with a high complexity and a high impact on integri...

CVE-2026-70109

A heap-based buffer overflow exists in the Microsoft PostScript Printer Driver , which allows an unauthorized attacker to achieve local privilege elevation . The vulnerability is classified as a High severity issue (CVSS 3.1 score of 7.8). Official remediation is available via a Microsoft securit...

CVE-2026-70147

A heap-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with a CRITICAL CVSS v3.1 score of 9.80 , indicating high impact on confidentia...