CVE-2026-77902

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation of this vulnerability requires the victim to open a malicious file or click a malicious link. Microsoft has released updates to address this and other vulnerabilitie...

CVE-2026-70258

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specif...

CVE-2026-97759

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The impact is rated as High (CVSS 8.8), potentially allowing for high confidentiality, integrity, and availability impacts. Microsoft has released official upd...

CVE-2026-97782

A vulnerability exists in Microsoft Office SharePoint where an observable discrepancy allows an authorized attacker to perform tampering over a network . The impact of this vulnerability includes high levels of confidentiality and integrity impact, with a CVSS v3.1 score of 6.8 . Microsoft has re...

CVE-2026-97774

A Time-of-check time-of-use (TOCTOU) race condition exists in Microsoft Office Click-To-Run . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (High) . No specific details regarding the affected component, root cause file, or exploi...

EUVD-2026-99831

Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-97783

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. An unauthorized attacker can leverage this flaw to perform spoofing over a network. Microsoft has released updates to address this issue, and us...

CVE-2026-97765

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this issue, and users are encouraged to install t...

CVE-2026-97778

A vulnerability exists in Microsoft Office Excel caused by an integer overflow or wraparound . This flaw allows an unauthorized attacker to achieve remote code execution over a network. While the technical root cause is an integer overflow, the specific component or file is not identified in the ...

CVE-2026-97739

A vulnerability exists in Microsoft Office Excel due to an Integer underflow (wrap or wraparound) . This flaw allows an unauthorized attacker to achieve Remote Code Execution over a network. Microsoft has released updates to address this issue; users are advised to install the latest security pat...

CVE-2026-97755

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a High severity (CVSS 3.1 score of 8.8 ) and requires user interaction, such as the victim opening a malicious file or clicking a malicious...

CVE-2026-97754

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network . This vulnerability enables remote code execution, which can lead to a denial-of-service, privilege escalation, or unauthorized access to sensitive information. To successfully e...

CVE-2026-97780

A heap-based buffer overflow exists in Microsoft Office Excel that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a HIGH severity rating (CVSS 3.1 score of 8.8) and requires user interaction to exploit. Microsoft has released updates to addr...

CVE-2026-97776

A heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft h...

CVE-2026-97761

A stack-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability impacts the software's ability to handle data safely, potentially leading to a full system compromise. Micro...

CVE-2026-97770

A stack-based buffer overflow exists in Microsoft Office Excel , which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a HIGH base severity score of 8.8 . Microsoft has released updates to address this vulnerability; users are recommended to in...

CVE-2026-97771

A use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. Microsoft has released updates to address this vulnerability; users are recommended to install the latest security updates. Exploitation details and specific p...

CVE-2026-97767

A double free vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact is rated as HIGH with a CVSS 3.1 score of 8.8 . Microsoft has released updates to address this vulnerability; users are encouraged ...

CVE-2026-97747

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has been addressed by Microsoft with the release of official updates. Users are recommended to install these updates to mitigate the risk. Exploitat...

CVE-2026-97751

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact is rated as HIGH with a CVSSv3.1 score of 8.8 . Microsoft has released updates to address this vulnerability; users ...