EUVD-2026-73793

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-77911

CVE-2026-77911 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The flaw requires user interaction and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availabilit...

EUVD-2026-73790

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-77901

A null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (e.g., opening a crafted document) but no prior authentication. CISA rates the technical impact as total while noting exploitation is cur...

CVE-2026-72976

CVE-2026-72976 is an out-of-bounds read in Microsoft Office Word that allows an authorized attacker with low privileges to disclose information locally. Exploitation requires user interaction, with no integrity or availability impact. The CVSS 3.1 base score is 5.0 (MEDIUM) (AV:L/AC:L/PR:L/UI:R/S...

EUVD-2026-73736

Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally...

EUVD-2026-73732

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-72973

Microsoft Office Word is affected by a heap-based buffer overflow that can lead to Remote Code Execution over a network. An unauthorized attacker can execute code with no prior privileges, though user interaction is required (e.g., opening a crafted document). The vulnerability is rated CVSS 8.8 ...

CVE-2026-72972

Microsoft Office Word is affected by a heap-based buffer overflow that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e.g., open...

EUVD-2026-73730

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73475

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69360

CVE-2026-69360 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior authentication. The assigned CVSS v3.1 score is 8.8 ...

EUVD-2026-73401

Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally...

CVE-2026-68843

CVE-2026-68843 is a use-after-free vulnerability in Microsoft Office Word that allows an authorized attacker to disclose information locally. The flaw resides in Word's handling of memory objects, where freed memory is subsequently accessed, potentially leaking sensitive data to a local user with...

EUVD-2026-73312

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78517

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized, remote attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, no required privileges, but user interaction required. CISA's SSVC assessment rates exploi...

CVE-2026-78504

CVE-2026-78504 is a stack-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 3.1: 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user inter...

EUVD-2026-73311

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73308

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78510

CVE-2026-78510 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to execute code over a network . The vulnerability is scored CVSS 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N, meaning it requires no user interaction or prior authentication. No p...