56 matches found
Security Updates for Microsoft Word Products C2R (September 2026)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVE-2026-69671, CVE-2026-69764, CVE-2026-72972, CVE-2026-72973,...
Security Updates for Microsoft Word Products (September 2026)
The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-62804 - Heap-based buffer overflow in Microsoft...
CVE-2026-80073
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...
CVE-2026-78520
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-78509
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
EUVD-2026-73830
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-78520
Microsoft Office Outlook is affected by an out-of-bounds read vulnerability (CVE-2026-78520), disclosed on 2026-09-08. The NVD description states it allows an unauthorized attacker to execute code over a network, while the associated CVSS 3.1 score of 6.5 (MEDIUM) with impacts limited to high con...
CVE-2026-80073
CVE-2026-80073 is an out-of-bounds read vulnerability in Microsoft Office Outlook that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction but no prior privileges, and results in a HIGH confidentiality impact with no integrity or ava...
CVE-2026-78519
CVE-2026-78519 is a use of uninitialized resource vulnerability in Microsoft Office Outlook that allows an unauthorized, remote attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with low attack complexity and no privileges required, though user interaction is required to...
CVE-2026-78509
CVE-2026-78509 is a heap-based buffer overflow in Microsoft Office Outlook that allows an unauthorized, remote attacker to achieve code execution over a network with no user interaction. The CNA-assigned CVSS 3.1 score is 9.8 (Critical) , reflecting low attack complexity and full impact on confid...
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
Microsoft Office Outlook Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
Microsoft Office Outlook Remote Code Execution Vulnerability
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...
PT-2026-87630
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-70329
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...