CVE-2026-105718

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. This flaw is associated with CWE-125 and CWE-20 , indicating issues with memory handling and input validation. The vulnerability has a High severity rating (CVSS 3.1: 8.8)...

CVE-2026-108467

A heap-based buffer overflow exists in the Microsoft PostScript Printer Driver . This vulnerability allows an authorized attacker to achieve remote code execution over a network. While the specific software versions are not detailed in the provided documents, the flaw enables significant impact o...

CVE-2026-105719

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network due to improper input validation . The impact is categorized as access to sensitive data with a CVSSv3.1 base score of 6.5. Microsoft has released updates to address this vulnerabil...

CVE-2026-105599

A heap-based buffer overflow exists in Microsoft Office PowerPoint , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with a HIGH severity score of 7.5 . Microsoft has released updates to address this vulnerability, and users are encourag...

CVE-2026-105714

A heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 score of 7.5 (High) and requires user interaction. Microsoft has released official updates to address this vulnerability; users are en...

CVE-2026-94506

An out-of-bounds read vulnerability in Microsoft Office Access allows an unauthorized attacker to disclose information over a network. The vulnerability results in access to sensitive data with a CVSS3.1 base score of 6.5. Microsoft has released updates to address this issue; users are encouraged...

CVE-2026-105598

A heap-based buffer overflow vulnerability in Microsoft Office Access allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability impacts the core application and can lead to high levels of confidentiality, integrity, and availability impact. Microsoft has r...

CVE-2026-105716

A heap-based buffer overflow vulnerability exists in Microsoft Office Access , which allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is listed alongside other critical flaws in the Office suite and has a CVSS v3.1 score of 8.8 (High) . Microsoft...

CVE-2026-105715

A vulnerability in Microsoft Office Word involves an integer overflow or wraparound , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact of this vulnerability includes potential arbitrary code execution within the victim's context. Microsoft has...

CVE-2026-105720

A vulnerability exists in Microsoft Office SharePoint due to incorrect authorization . This flaw allows an authorized attacker to perform privilege escalation over a network. Microsoft has released updates to address this issue; users are encouraged to install the latest security patches via the ...

CVE-2026-105713

A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint . This flaw allows an authorized attacker to perform spoofing over an adjacent network . The vulnerability has a CVSS 3.1 base score of 5.7 (Medium) . Microsoft has released updates to address this issue; use...

CVE-2026-105597

A heap-based buffer overflow exists in Microsoft Office Access , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability is associated with a High severity (CVSS 8.8) and can be triggered remotely. Microsoft has released updates to address this issu...

CVE-2026-105595

An out-of-bounds read vulnerability in Microsoft Office Access allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability impacts the software's ability to securely handle data, potentially leading to the execution of arbitrary code in the context of the us...

CVE-2026-105591

A heap-based buffer overflow vulnerability in Microsoft Office Access allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a HIGH severity (CVSS 3.1: 8.8) and requires user interaction. Microsoft has released security updates to address this issue; users...

CVE-2026-105592

A heap-based buffer overflow exists in Microsoft Office Access , which could allow an unauthorized attacker to execute arbitrary code over a network. To successfully exploit this, an attacker must typically trick a victim into opening a malicious file or clicking a malicious link. Microsoft has r...

CVE-2026-105593

A heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability carries a HIGH base severity score of 8.8. To successfully exploit this, an attacker would typically require the victim to open a malici...

CVE-2026-105596

A heap-based buffer overflow exists in Microsoft Office Access , which could allow an unauthorized attacker to execute arbitrary code over a network. The impact of this vulnerability is rated as High with a CVSS 3.1 score of 8.8 . Microsoft has released updates to address this vulnerability, and ...

CVE-2026-102862

A vulnerability in Microsoft Office SharePoint (CVE-2026-102862) allows an authorized attacker to achieve privilege escalation over a network due to incorrect authorization (CWE-863). The issue has a CVSS 3.1 score of 8.8 (High) , with high impact on confidentiality, integrity, and availability. ...

CVE-2026-102863

A code injection vulnerability (CWE-94 ) exists in Microsoft Office SharePoint , where an authorized attacker can elevate privileges over a network. This vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released updates to address this issue; users are encouraged to install the la...

CVE-2026-102865

A vulnerability in Microsoft Office SharePoint was identified where incorrect authorization allows an authorized attacker to disclose information over a network. This issue results in access to sensitive data and has been assigned a CVSS 3.1 score of 6.50 (Medium) . Microsoft has released updates...