EUVD-2026-73849

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

EUVD-2026-73848

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...

CVE-2026-81352

CVE-2026-81352 is a heap-based buffer overflow in the Microsoft Windows Codecs Library , specifically within Web Media Extensions , that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (High) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H...

CVE-2026-81353

A heap-based buffer overflow in the HEIF Image Extensions component of the Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally . The vulnerability scores CVSS 7.8 (High) with a local attack vector, low complexity, no required privileges, but user interaction i...

EUVD-2026-73845

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

CVE-2026-80081

CVE-2026-80081 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interacti...

EUVD-2026-73840

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-80085

CVE-2026-80085 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a crafted document) but no prior authentication, yielding high impact to confidentialit...

EUVD-2026-73838

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-80080

CVE-2026-80080 is a double free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network with user interaction required. The CVSS 3.1 base score is 8.8 (HIGH) , reflecting high impact to confidentiality, integrity, and availabilit...

EUVD-2026-73836

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-78525

CVE-2026-78525 is a use-after-free vulnerability in Microsoft Office Outlook that allows an unauthenticated, remote attacker to achieve remote code execution . The CVSS v3.1 base score is 8.8 (High) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning user interaction is required but n...

EUVD-2026-73834

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78526

CVE-2026-78526 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with an attack vector of network, low complexity, no privileges required, and user interaction requ...

EUVD-2026-73830

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-78524

CVE-2026-78524 is an out-of-bounds write vulnerability in Microsoft Office that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R, meaning exploitation requires user interaction but no prior authen...

EUVD-2026-73831

Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-78520

Microsoft Office Outlook is affected by an out-of-bounds read vulnerability (CVE-2026-78520), disclosed on 2026-09-08. The NVD description states it allows an unauthorized attacker to execute code over a network, while the associated CVSS 3.1 score of 6.5 (MEDIUM) with impacts limited to high con...

EUVD-2026-73827

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78521

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The attack requires user interaction (e.g., opening a malicious document) but no prior auth...