CVE-2026-97744

A vulnerability exists in Microsoft Office PowerPoint due to an out-of-bounds read condition. This flaw allows an unauthorized attacker to disclose information locally . Microsoft has released updates to address this vulnerability, and users are advised to install them. Exploitation details are n...

CVE-2026-97001

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution locally. The vulnerability is confirmed by multiple sources, including NVD and Microsoft security advisories. To successfully exploit this, an attacker must trick the victim into...

CVE-2026-97009

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution locally. The vulnerability carries a CVSS v3.1 score of 7.8 (High) . Microsoft has released official updates to address this security flaw. Users are encouraged to install the l...

CVE-2026-97766

A Heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The severity is rated as High with a CVSS 3.1 score of 8.8. Microsoft has released updates to address this vulnerability; users are recommended to install...

CVE-2026-97753

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability involves a heap-based buffer overflow and an integer overflow/wraparound (CWE-122, CWE-190). Exploitation requires user interaction , suc...

CVE-2026-97017

A use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 8.8 (High) . To mitigate this risk, Microsoft has released updates; users are encouraged to install the latest secur...

CVE-2026-97750

A stack-based buffer overflow vulnerability exists in Microsoft Office Excel , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity (CVSS 8.8) and requires user interaction to exploit. Microsoft has released updates to ...

CVE-2026-97740

A vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive system information over a network. The issue is characterized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). An attacker can exploit this to gain access to ...

CVE-2026-96995

A stack-based buffer overflow exists in Microsoft Office Word , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-121 (Stack-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Microsoft has released updates to address ...

CVE-2026-97012

A stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS score of 8.8 . Microsoft has released security updates to address this issue, and users are encourage...

CVE-2026-96996

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally . The vulnerability's impact is categorized as Arbitrary code execution with a CVSS 3.1 base score of 7.8. To successfully exploit this vulnerability, an attacker typically requires the v...

CVE-2026-97016

A heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CRITICAL severity score of 9.8 . Microsoft has released updates to address this issue, and users are encouraged to install them via the...

CVE-2026-96864

A double free vulnerability exists in the Microsoft Failover Cluster Virtual Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS 3.1 score of 9.8 . While the documents confirm the impact is the...

EUVD-2026-99742

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-70049

A SQL injection vulnerability exists in Microsoft Configuration Manager due to the improper neutralization of special elements used in an SQL command. This flaw allows an authorized attacker to elevate privileges over an adjacent network. The vulnerability is assigned a High base severity score. ...

CVE-2026-88208

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. This flaw allows an authorized attacker to perform spoofing over a network. Microsoft has released security updates to address this issue, and u...

CVE-2026-88201

A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive information over a network. This vulnerability impacts the confidentiality of data within the victim's context. Microsoft has released official updates to address this issue; users are...

CVE-2026-88175

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose information over a network. The impact is categorized as access to sensitive data . Microsoft has released security updates to address this vulnerability; users are encour...

CVE-2026-88202

A heap-based buffer overflow exists in Microsoft Office Word , potentially allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a HIGH severity (CVSS 3.1 score of 8.8). To successfully exploit this, an attacker may require the victim t...

CVE-2026-88198

A missing authorization vulnerability in Microsoft Office SharePoint (CVE-2026-88198) allows an authorized attacker to elevate privileges over a network. The impact is rated as High with a CVSS 3.1 score of 8.8. Microsoft has released official updates to address this issue; users are recommended ...