11926 matches found
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2026-70332
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability
...
CVE-2026-70332
CVE-2026-70332 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an unauthorized attacker to perform network spoofing. The connected sources consistently identify SharePoint as affected and report SSRF as the underlying issue, with related entries also refe...
CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability
...
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
KLA91193 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Service Bus can be exploited...
EUVD-2026-52536
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
PT-2026-67554
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
KLA91186 ACE vulnerability in Microsoft Office
Arbitrary code execution vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-62870 Exploitation CVE list CVE-2026-62870 critical KB list 5002886 Solution Install necessary updates from the KB section,...
VulnCheck KEV: CVE-2026-50522
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
Vulnerabilities of Microsoft Office, Excel, and 365 Apps for Enterprise packages, as well as Microsoft Office Online Server, allow attackers to disclose protected information.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs, as well as Microsoft Office Online Server, is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by...
Security Updates for Microsoft Office Products C2R (July 2026)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-55045 - Use after free in Microsoft Office allows an unauthorized attacker...
EUVD-2026-44043
Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-43767
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
CVE-2026-56195
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-56192
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-55949
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally...