23066 matches found
CVE-2026-40357
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-40360
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-40358
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-40359
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-35436
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...
vulnerabilities present in Microsoft Office
Microsoft has identified vulnerabilities in various Office products. A malicious individual can exploit these vulnerabilities to impersonate another user or execute arbitrary code with the victim’s privileges, potentially accessing sensitive data within the context of the victim’s account. For...
CVE-2026-42832
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally...
CVE-2026-42832
This CVE (CVE-2026-42832) concerns Microsoft Office and is rooted in improper access control that enables a local attacker to spoof. Affected software is Microsoft Office; the vulnerability is described as allowing local spoofing with high impact to confidentiality and integrity (per CVSS 3.1 met...
CVE-2026-42832 Microsoft Office Spoofing Vulnerability
...
CVE-2026-42832 Microsoft Office Spoofing Vulnerability
...
CVE-2026-40420 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40420 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40420
CVE-2026-40420 : Affected product: Microsoft Office Click-To-Run. Description: Improper access control allows an authorized attacker to elevate privileges locally. The vulnerability is described across multiple sources (NVD, CVE lists) with a high impact score (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:C/C...
CVE-2026-40420
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...
CVE-2026-35436
CVE-2026-35436 describes an elevation of privilege vulnerability in Microsoft Office Click-To-Run caused by insufficient granularity of access control. The CVE affects Office Click-To-Run components, enabling an attacker with LOCAL access and LOW privileges, and with NO user interaction, to achie...
CVE-2026-35436 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-35436 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
CVE-2026-40418
Technical details (affected product, vulnerable component, version, exploit method) are not publicly available in the provided documents. Monitor for updates from official advisories.