23078 matches found
CVE-2026-50467 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-50301
CVE-2026-50301 is a heap-based buffer overflow in Microsoft Office that allows local code execution. The provided documents confirm the affected product (Microsoft Office) and the impact (remote/local execution via heap overflow) but do not include detailed exploit steps or patch/fix information ...
CVE-2026-50301 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-50301 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-47290 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-47290
CVE-2026-47290 is a Microsoft Office remote-code-execution vulnerability described as a use-after-free in Office components. Affected software includes Microsoft Office family (Word, Excel, PowerPoint, SharePoint) with the Office ecosystem cited in NCsc advisories and CIRCL sighting logs. The CVS...
CVE-2026-47290 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-58644
CVE-2026-58644 – Microsoft SharePoint Deserialization of Untrusted Data (Server) involves a deserialization flaw in SharePoint Server that allows an unauthenticated attacker to execute arbitrary code over a network. The vulnerability affects Microsoft Office SharePoint/SharePoint Server component...
CVE-2026-58618
CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...
CVE-2026-50522
CVE-2026-50522 is a deserialization flaw in Microsoft Office SharePoint that enables remote code execution over a network. Affected products include on‑premises SharePoint Server variants (Server 2016/2019, Subscription Edition, Enterprise Server). The root cause is deserialization of untrusted d...
CVE-2026-56193 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-56193
CVE-2026-56193 describes an out-of-bounds read in Microsoft Office that allows a local attacker to disclose information. The available records indicate a high-severity impact (Confidentiality and Availability) with local access and user interaction required, but no explicit details on affected Of...
CVE-2026-56193 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-56164
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-56164
CVE-2026-56164 is a Microsoft SharePoint Server elevation-of-privilege vulnerability described as missing authentication for a critical function, enabling a remote attacker to elevate privileges over a network. Public advisories indicate widespread Office-related vulnerabilities, with SharePoint ...
CVE-2026-55948
CVE-2026-55948 is a use-after-free vulnerability in Microsoft Office Excel that can allow local code execution. Affected: Excel (Office). Root cause: use-after-free in the Excel component. Impact: HIGH for confidentiality, integrity, and availability. CVSS v3.1 base score 7.8; attack vector LOCAL...
CVE-2026-50678
CVE-2026-50678: A heap-based buffer overflow in Microsoft Excel (Office) allows local information disclosure. CVSS v3.1 base score 6.6 (Medium): AV:L, AC:L, PR:N, UI:R, S:U, C:L, I:L, A:H. No exploit details are provided in the accompanying documents; remediation status/patch info not specified.
CVE-2026-54108
CVE-2026-54108 affects Microsoft SharePoint Server. An authorized attacker can influence a file name or path in SharePoint, enabling network-based spoofing. CVSS v3.1: 6.5 (MEDIUM), AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Root cause details are not provided in the supplied documents; no exploitation...
