CVE-2026-70343

A heap-based buffer overflow vulnerability exists in the Microsoft MPEG-2 Video Extension . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 and carries a CVSS 3.1 base score of 8.8 (High) , indicating high imp...

CVE-2026-96186

The Microsoft Windows Media Foundation component is vulnerable to a deserialization of untrusted data flaw (CWE-502). This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific patch versions or exploit links are provided in the documents.

CVE-2026-88207

A heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability requires user interaction, as an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft has...

CVE-2026-96044

A Privilege Escalation vulnerability exists in Microsoft Office SharePoint . This issue allows an authorized attacker to elevate their privileges over a network. The vulnerability has a High base severity with a CVSS score of 8.8 . Microsoft has released updates to address this issue; users are r...

CVE-2026-88206

A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , which allows an authorized attacker to elevate privileges over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 7.5 (High) . Microsoft has released official updates to address this is...

CVE-2026-88183

An out-of-bounds read vulnerability exists in Microsoft Office PowerPoint , which allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS v3.1 score of 6.5 (Medium) . Impacted functionality includes data disclosure within...

CVE-2026-88203

An untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. This vulnerability has a CVSS 3.1 base score of 6.5 (Medium) and requires user interaction. Microsoft has released updates to address this and other vulnerabilit...

CVE-2026-88200

A Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. This vulnerability is characterized by a HIGH base severity score of 8.8 (CVSS v3.1), with impacts on confidentiality, integrity, and availability. Microsoft has ...

CVE-2026-88190

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose sensitive information over a network. The vulnerability is classified as a Medium severity issue with a CVSS score of 6.5. Microsoft has released security updates to addre...

CVE-2026-88192

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which allows an unauthorized attacker to disclose sensitive information over a network. The vulnerability is confirmed by the NCSC and Microsoft as a security risk. Remediation is available via official Microsoft updates ; use...

CVE-2026-88195

A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive information over a network. The vulnerability is associated with CWE-126 (Buffer Over-read) and CWE-191 (Integer Underflow). The impact is categorized as high confidentiality with a CV...

CVE-2026-88184

An out-of-bounds read vulnerability exists in Microsoft Office Excel , allowing an unauthorized attacker to disclose information over a network. The vulnerability results in an access to sensitive data impact with a CVSS 3.1 base score of 6.5. Microsoft has released updates to address this issue;...

CVE-2026-88185

A heap-based buffer overflow exists in Microsoft Office Word , which may allow an unauthorized attacker to execute code over a network. This vulnerability is associated with CWE-122 and has a CVSS v3.1 score of 8.1 (High). Microsoft has released updates to address this vulnerability. Affected sys...

CVE-2026-88210

A security feature bypass vulnerability exists in Microsoft Office Word due to the software's reliance on untrusted inputs in a security decision. An unauthorized attacker can exploit this flaw locally to bypass specific security protections. The impact of this vulnerability is classified as a by...

CVE-2026-88186

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). Microsoft has released updates to addre...

CVE-2026-88166

Microsoft Office SharePoint is affected by CVE-2026-88166 , which involves an integer overflow or wraparound vulnerability. An authorized attacker can exploit this flaw to achieve arbitrary code execution over a network. Microsoft has released security updates to address this vulnerability; users...

CVE-2026-70219

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose information over a network. Microsoft has released updates to address this vulnerability, and users are recommended to install them. Detailed information regarding specifi...

CVE-2026-88144

A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute arbitrary code over a network. This flaw could lead to a compromise of the victim's context, including the ability to execute code or access sensitive information. To successfully exploit this...

CVE-2026-88163

An integer overflow or wraparound vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve remote code execution over a network. While the NCSC advisory lists this CVE under SharePoint, it notes the impact as "Not a Vulnerability" (translated from the source text), co...

CVE-2026-70215

A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 score of 8.8 and carries a high severity for confidentiality, integrity, and availability. Exploitation typically requires a victim to ope...