158027 matches found
CVE-2026-80087
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network , per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) scoring it 6.5 MEDIUM . The CISA SSVC assessment rates exploitation as none , automatability as no , and technica...
EUVD-2026-73837
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73838
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-80080
CVE-2026-80080 is a double free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network with user interaction required. The CVSS 3.1 base score is 8.8 (HIGH) , reflecting high impact to confidentiality, integrity, and availabilit...
CVE-2026-80086
CVE-2026-80086 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 base score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating a network-based attack with l...
EUVD-2026-73836
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
EUVD-2026-73835
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...
CVE-2026-78525
CVE-2026-78525 is a use-after-free vulnerability in Microsoft Office Outlook that allows an unauthenticated, remote attacker to achieve remote code execution . The CVSS v3.1 base score is 8.8 (High) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning user interaction is required but n...
CVE-2026-80084
CVE-2026-80084 is an out-of-bounds read vulnerability in Microsoft Office Outlook that allows an unauthorized, network-based attacker to disclose information when user interaction is required. The vulnerability is rated CVSS 6.5 (Medium) with high impact to confidentiality but no impact on integr...
EUVD-2026-73834
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78526
CVE-2026-78526 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with an attack vector of network, low complexity, no privileges required, and user interaction requ...
EUVD-2026-73832
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73833
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...
CVE-2026-80076
CVE-2026-80076 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized, remote attacker to disclose information over a network. The vulnerability is rated CVSS 3.1 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:N/UI:R, meaning exploitation requires user interaction but ...
CVE-2026-80078
Microsoft Office is affected by an out-of-bounds read vulnerability that allows an unauthorized, network-based attacker to disclose information . The attack requires user interaction and no prior privileges, resulting in high confidentiality impact with a CVSS 3.1 score of 6.5 (MEDIUM) . CISA's S...
EUVD-2026-73830
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
EUVD-2026-73831
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network...
CVE-2026-78520
Microsoft Office Outlook is affected by an out-of-bounds read vulnerability (CVE-2026-78520), disclosed on 2026-09-08. The NVD description states it allows an unauthorized attacker to execute code over a network, while the associated CVSS 3.1 score of 6.5 (MEDIUM) with impacts limited to high con...
CVE-2026-78524
CVE-2026-78524 is an out-of-bounds write vulnerability in Microsoft Office that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R, meaning exploitation requires user interaction but no prior authen...