CVE-2026-97776

A heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft h...

CVE-2026-97761

A stack-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability impacts the software's ability to handle data safely, potentially leading to a full system compromise. Micro...

CVE-2026-97758

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High Severity), which indicates a high impact on confidentiality, integrity, and availability with low attack comp...

CVE-2026-97751

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact is rated as HIGH with a CVSSv3.1 score of 8.8 . Microsoft has released updates to address this vulnerability; users ...

CVE-2026-97770

A stack-based buffer overflow exists in Microsoft Office Excel , which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a HIGH base severity score of 8.8 . Microsoft has released updates to address this vulnerability; users are recommended to in...

CVE-2026-97003

A heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability impacts the Excel component and can lead to remote code execution. Microsoft has released updates to address this issue; users are enco...

CVE-2026-97766

A Heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The severity is rated as High with a CVSS 3.1 score of 8.8. Microsoft has released updates to address this vulnerability; users are recommended to install...

CVE-2026-97001

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution locally. The vulnerability is confirmed by multiple sources, including NVD and Microsoft security advisories. To successfully exploit this, an attacker must trick the victim into...

CVE-2026-97753

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability involves a heap-based buffer overflow and an integer overflow/wraparound (CWE-122, CWE-190). Exploitation requires user interaction , suc...

CVE-2026-97750

A stack-based buffer overflow vulnerability exists in Microsoft Office Excel , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity (CVSS 8.8) and requires user interaction to exploit. Microsoft has released updates to ...

CVE-2026-97009

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution locally. The vulnerability carries a CVSS v3.1 score of 7.8 (High) . Microsoft has released official updates to address this security flaw. Users are encouraged to install the l...

CVE-2026-96996

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally . The vulnerability's impact is categorized as Arbitrary code execution with a CVSS 3.1 base score of 7.8. To successfully exploit this vulnerability, an attacker typically requires the v...

CVE-2026-96995

A stack-based buffer overflow exists in Microsoft Office Word , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-121 (Stack-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Microsoft has released updates to address ...

CVE-2026-97012

A stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS score of 8.8 . Microsoft has released security updates to address this issue, and users are encourage...

CVE-2026-96920

A heap-based buffer overflow exists in the Windows Program Compatibility Assistant Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific component or function is not detailed, the issue impacts local security boundaries. No specific ...

CVE-2026-97016

A heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CRITICAL severity score of 9.8 . Microsoft has released updates to address this issue, and users are encouraged to install them via the...

CVE-2026-96868

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by high complexity and requires local access. No specific exploit details or information regarding in-the-wild exploitati...

CVE-2026-96856

A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as HIGH severity with a CVSS 3.1 score of 7.8 . No specific exploit details or evidence of in-the-wild exploitati...

CVE-2026-96863

A heap-based buffer overflow vulnerability exists in the Windows Storage Port Driver . This flaw allows an unauthorized attacker to elevate privileges via a physical attack . The provided documents do not specify the exact affected versions or the specific function/file involved. No information r...

CVE-2026-96312

A heap-based buffer overflow exists in the Windows Kernel that enables an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-122 . While the specific component or function is not detailed in the provided documents, the impact involves a high s...