CVE-2026-97756

A heap-based buffer overflow exists in Microsoft Office Excel , which allows an unauthorized attacker to execute code over a network. Exploitation typically requires the victim to open a malicious file or click a malicious link. Microsoft has released updates to address this vulnerability; users ...

CVE-2026-97769

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which can allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-20 (Improper Input Validation). Practical consequences include ...

CVE-2026-97007

A heap-based buffer overflow exists in Microsoft Office Excel , potentially allowing an unauthorized attacker to execute arbitrary code over a network. The vulnerability is rated as HIGH severity (CVSS 3.1: 8.8) and requires user interaction to exploit. Microsoft has released official fixes to ad...

CVE-2026-97779

A vulnerability exists in Microsoft Office Excel involving an out-of-bounds read that allows an unauthorized attacker to disclose information over a network. The impact is classified as high confidentiality with a CVSS 3.1 score of 6.5. Microsoft has released updates to address this vulnerability...

CVE-2026-97773

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability's severity is rated as High (CVSS 3.1: 8.8) due to its potential for significant confidentiality, integrit...

CVE-2026-97748

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve arbitrary code execution over a network. To successfully exploit this vulnerability, an attacker must typically trick a victim into opening a malicious file or click...

CVE-2026-97008

A buffer underwrite (buffer underflow) vulnerability exists in Microsoft Office Excel . This flaw allows an unauthorized attacker to execute arbitrary code over a network. Microsoft has released security updates to address this vulnerability; users are recommended to install the latest patches vi...

CVE-2026-88184

An out-of-bounds read vulnerability exists in Microsoft Office Excel , allowing an unauthorized attacker to disclose information over a network. The vulnerability results in an access to sensitive data impact with a CVSS 3.1 base score of 6.5. Microsoft has released updates to address this issue;...

CVE-2026-88192

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which allows an unauthorized attacker to disclose sensitive information over a network. The vulnerability is confirmed by the NCSC and Microsoft as a security risk. Remediation is available via official Microsoft updates ; use...

CVE-2026-88190

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose sensitive information over a network. The vulnerability is classified as a Medium severity issue with a CVSS score of 6.5. Microsoft has released security updates to addre...

CVE-2026-88195

A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive information over a network. The vulnerability is associated with CWE-126 (Buffer Over-read) and CWE-191 (Integer Underflow). The impact is categorized as high confidentiality with a CV...

CVE-2026-88172

A vulnerability exists in Microsoft Office Excel involving an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The impact is classified as Access to sensitive data with a CVSS v3.1 base score of 6.5. Microsoft has released official up...

CVE-2026-70219

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose information over a network. Microsoft has released updates to address this vulnerability, and users are recommended to install them. Detailed information regarding specifi...

CVE-2026-88154

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose sensitive information over a network. The issue is categorized under CWE-125 and has a CVSS 3.1 score of 6.5 (Medium) . Microsoft has released official updates to address ...

CVE-2026-70254

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation of this vulnerability requires the victim to be tricked into opening a malicious file or clicking a malicious link. Microsoft has released updates to address ...

CVE-2026-70214

A vulnerability in Microsoft Office Excel allows an unauthorized attacker to perform an out-of-bounds read , which can result in the disclosure of sensitive information locally. The issue has a CVSS v3.1 score of 5.5 (Medium) . Microsoft has released official updates to address this vulnerability...

CVE-2026-77902

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation of this vulnerability requires the victim to open a malicious file or click a malicious link. Microsoft has released updates to address this and other vulnerabilitie...

CVE-2026-97739

A vulnerability exists in Microsoft Office Excel due to an Integer underflow (wrap or wraparound) . This flaw allows an unauthorized attacker to achieve Remote Code Execution over a network. Microsoft has released updates to address this issue; users are advised to install the latest security pat...

CVE-2026-97765

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this issue, and users are encouraged to install t...

CVE-2026-97755

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a High severity (CVSS 3.1 score of 8.8 ) and requires user interaction, such as the victim opening a malicious file or clicking a malicious...