CVE-2026-64898: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-64911: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-64915: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-65657: Use After Free

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-68812: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-68814: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-68817: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-20789: Improper Access Control

Improper access control for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...

CVE-2026-20891: Improper Authentication

Improper authentication for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...

Security Updates for Microsoft Word Products (August 2026)

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-63527, CVE-2026-64907 - Use after free in Microsoft Office...

PT-2026-70638

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An untrusted pointer dereference occurs in Microsoft Office, which could allow an unauthorized attacker to execute code locally. A pointer dereference is a technical error where a...

PT-2026-70314

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description Improper authentication within Ring 2: Device Drivers allows an unprivileged software adversary to escalate privileges. This issue enables local code...

PT-2026-70618

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

PT-2026-70611

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-20737: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable...

CVE-2026-54984: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally...

CVE-2026-63515: Out-of-bounds Read

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-64914: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally...

CVE-2026-65656: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-66807: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...