CVE-2026-64898 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-63532

CVE-2026-63532 affects Microsoft Office and is caused by an integer overflow/wraparound in a component of Office, enabling local code execution by an unauthenticated user with at least user interaction. The available sources describe the vulnerability class and impact but do not provide specific ...

CVE-2026-63533

Microsoft Office is affected by CVE-2026-63533, described as a heap-based buffer overflow that allows an unauthorized attacker to execute code locally. The available sources (NVD and CVE records) confirm a local exploit scenario with a base CVSS v3.1 score of 7.8 (HIGH) and impact to confidential...

CVE-2026-63532 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-63531 Microsoft Office Word Information Disclosure Vulnerability

...

CVE-2026-63530 Microsoft Office Word Information Disclosure Vulnerability

...

CVE-2026-63529

CVE-2026-63529 affects Microsoft Office. The documented issue is an out-of-bounds read that enables a local attacker to disclose information. The available sources do not provide specific impacted products, versions, or vulnerable components beyond the general Microsoft Office reference, nor deta...

CVE-2026-63529 Microsoft Office Information Disclosure Vulnerability

...

CVE-2026-63527

Microsoft Word is affected by CVE-2026-63527 due to a stack-based buffer overflow in Word documents/processing. The vulnerability allows an unauthorized attacker to execute code locally on a system that processes a crafted document, with local attack vector and user interaction required. The CVSS...

CVE-2026-63524 Microsoft Office Information Disclosure Vulnerability

...

CVE-2026-63524

Technical details about CVE-2026-63524 are not publicly available in the provided documents. Monitor for updates from sources like NVD/MSRC for affected products, vulnerable components, and remediation.

CVE-2026-63525

CVE-2026-63525 involves a numeric truncation error in Microsoft Office Word that could allow an attacker to achieve local code execution. The entry specifies a local attack vector with low attack complexity and no privileges required, and user interaction is required. The impact is high on confid...

CVE-2026-62911

Technical details (affected software, vulnerable component, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2026-62887 Windows NTFS Information Disclosure Vulnerability

...

CVE-2026-62886 .NET Elevation of Privilege Vulnerability

...

CVE-2026-62886

CVE-2026-62886: integer overflow/wraparound in .NET allows local privilege escalation; affected component is .NET. Root cause: integer overflow. Exploitation details and fixes are not provided in the attached documents; consult the Microsoft update guide for remediation if available.

CVE-2026-62883

CVE-2026-62883 describes a numeric truncation error in Windows DNS that allows an authorized attacker to elevate privileges locally. Affected component: Windows DNS resolution logic. Root cause: numeric truncation leads to improper handling of DNS-related data, enabling local privilege escalation...