571 matches found
CVE-2026-64915
CVE-2026-64915 affects Microsoft Word, with a heap-based buffer overflow that permits local code execution. Exploitation requires local access and user interaction; CVSS v3.1 base score 7.8 (HIGH). A patch/mitigation is available from Microsoft via the MSRC advisory referenced in the entry (updat...
CVE-2026-64910 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-64907 Microsoft Office Word Remote Code Execution Vulnerability
...
CVE-2026-63533
Microsoft Office is affected by CVE-2026-63533, described as a heap-based buffer overflow that allows an unauthorized attacker to execute code locally. The available sources (NVD and CVE records) confirm a local exploit scenario with a base CVSS v3.1 score of 7.8 (HIGH) and impact to confidential...
CVE-2026-68796
CVE-2026-68796 describes a heap-based buffer overflow in Microsoft Excel that can lead to local code execution. Impact per CVSS: HIGH, with local attack vector, required user interaction, and high confidentiality/integrity/availability impact. Affected product is Microsoft Excel; root cause is a ...
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
The vulnerability of Microsoft Word, Microsoft Office products, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint arises from an operation that occurs outside of the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server packages, related to the execution of operations outside the buffer in memory, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploitation of this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted...
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
CVE-2026-21509 — Microsoft Office Security Feature Bypass -...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
KLA91160 SUI vulnerability in Microsoft Office
User interface spoofing vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2026-62826 Exploitation CVE list CVE-2026-62826 high KB list 5002882 5002883 5002891 Solution Install necessary updates from the KB...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to disclose protected information.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these applications...
CVE-2026-55125
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-50314
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-56192 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-56192 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-55056 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-55026 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-55026
CVE-2026-55026 is an Office-related vulnerability caused by an integer overflow/wraparound in Microsoft Office that enables local information disclosure. Affected: Microsoft Office components; root cause per the CVE entry is integer overflow. Impact per NVD: Confidentiality impact HIGH, no integr...