PT-2026-70641

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70609

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

Security Updates for Microsoft Office Products (August 2026)

The Microsoft Office Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-63513, CVE-2026-63533, CVE-2026-65661 - Integer overflow or...

Security Bulletin: Immutable.js Denial of Service Vulnerabilities in Content Cortex for Microsoft Office

Summary Immutable.js versions before 4.3.9 and 5.1.8 have two DoS vulnerabilities CVSS 7.5, High. CVE-2026-59879 is an integer overflow in List operations set, setSize, setIn, updateIn that can cause infinite loops or unbounded memory allocation when given index/size values between 2^30 and 2^31...

[SECURITY] Fedora 43 Update: python-wsgidav-4.3.5-1.fc43

A generic and extendable WebDAV server written in Python and based on WSGI. Main features: =E2=80=A2 WsgiDAV is a stand-alone WebDAV server with SSL support, that can be installed and run as Python command line script. =E2=80=A2 The python-pam library is needed as extra requirement if pam-login...

The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office packages and Microsoft 365 Apps for Enterprise allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-70332

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70332

CVE-2026-70332 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an unauthorized attacker to perform network spoofing. The connected sources consistently identify SharePoint as affected and report SSRF as the underlying issue, with related entries also refe...

CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability

...

CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability

...

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

KLA91193 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Service Bus can be exploited...

EUVD-2026-52536

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-62870

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-67554

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

The vulnerability of Microsoft Word, a component of the Microsoft Office 365 suite of programs, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Word and the Microsoft Office 365 suite is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Word, the Microsoft Office 365 suite of programs, related to numerical truncation errors, allows a perpetrator to disclose protected information.

The vulnerability of Microsoft Word and the Microsoft Office 365 suite is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of Microsoft Word, Microsoft Office products, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to...

The vulnerability of Microsoft Word, Microsoft Office products, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to...

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint arises from an operation that occurs outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...