CVE-2026-55145 Outlook Copilot Tampering Vulnerability

...

CVE-2026-55131 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-55131

Root cause: a heap-based buffer overflow in Microsoft Office Excel (part of Microsoft Office) allows an attacker to execute code locally. Affected: Excel; vulnerability appears to enable local code execution upon exploitation of the overflow. CVSSv3.1 metrics indicate Local access, No privileges ...

CVE-2026-55055

CVE-2026-55055 is a stack-based buffer overflow in Microsoft Word (part of Microsoft Office) that enables a local attacker to execute code. The vulnerability affects Word components and is documented with a CVSS 3.1 base score of 7.8 (High) with Local attack vector, user interaction required, and...

CVE-2026-55136

CVE-2026-55136 affects Microsoft Excel (part of Microsoft Office). The vulnerability is caused by an untrusted pointer dereference in Excel, enabling a local attacker to execute code on the affected system. CVSS 3.1 base score 7.8 (HIGH) with local access, no privileges required, user interaction...

EUVD-2026-44163

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-55024

CVE-2026-55024 – Microsoft Excel remote code execution . The vulnerability is described as an access of resource using incompatible type (type confusion) in Microsoft Office Excel, enabling an unauthorized attacker to execute code locally. Connected advisories (NCSC, ZDI, ENISA ENISA-style) indic...

CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

CVE-2026-50491

The CVE-2026-50491 entry documents an out-of-bounds read in the Code Integrity DLL (ci.dll) that enables an authorized local attacker to achieve Elevation of Privileges. Affected component: Windows Code Integrity mechanism (ci.dll). Root cause: out-of-bounds read in ci.dll leading to privilege es...

CVE-2026-50406 Windows Backup Engine Elevation of Privilege Vulnerability

...

CVE-2026-50427

CVE-2026-50427 affects Content Delivery Manager. Description: use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. CVSS v3.1: 7.8 (Local, Low user interaction, Privilege Escalation, high impact on confidentiality, integrity, availability). Connected sourc...

CVE-2026-50371 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability

...

CVE-2026-50327

CVE-2026-50327 is a heap-based buffer overflow in Windows Media that could allow an authorized attacker to execute code locally. Affected components are Windows Media/Windows Media Foundation. The root cause is a heap-based buffer overflow. Mitigation: apply the Microsoft security updates; the CV...

CVE-2026-50326 Windows Unified Consent System Elevation of Privilege Vulnerability

...

CVE-2026-50356 Microsoft Windows App Store Elevation of Privilege Vulnerability

...

CVE-2026-50318 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2026-49801 Windows SMB Information Disclosure Vulnerability

...

CVE-2026-49783 Secure Boot Security Feature Bypass Vulnerability

...

CVE-2026-48581

CVE-2026-48581 affects Microsoft Surface. It describes insufficient granularity of access control enabling a locally authenticated attacker to escalate privileges (Impact: high; CVSS 3.1 base 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected records show the vulnerability in Surface Broker SDM...