CVE-2026-55016 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-55016

CVE-2026-55016 is a SharePoint-related issue affecting Microsoft Office SharePoint, described as improper neutralization of input during web page generation (XSS) that enables spoofing over a network by an authorized attacker. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) yields a bas...

CVE-2026-55017 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-50314

CVE-2026-50314 is a Microsoft Office use-after-free vulnerability that enables a local attacker to execute arbitrary code by convincing a user to open a malicious document or link (Office components implicated include Word/Excel/PowerPoint/SharePoint per provided sources). The issue is described ...

CVE-2026-50467

CVE-2026-50467 is a use-after-free vulnerability in Microsoft Office that can allow an attacker to execute code locally. The linked sources (Microsoft and third-party advisories) confirm Office as the affected product and describe the underlying issue as a use-after-free leading to arbitrary code...

CVE-2026-50467 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-50314 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-50467 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-50301 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-48580 Microsoft Excel Information Disclosure Vulnerability

...

CVE-2026-48580 Microsoft Excel Information Disclosure Vulnerability

...

CVE-2026-50301 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-50301

CVE-2026-50301 is a heap-based buffer overflow in Microsoft Office that allows local code execution. The provided documents confirm the affected product (Microsoft Office) and the impact (remote/local execution via heap overflow) but do not include detailed exploit steps or patch/fix information ...

CVE-2026-48580

CVE-2026-48580 affects Microsoft Office Excel. The vulnerability is an untrusted pointer dereference in Excel that can allow an attacker to disclose information locally. Based on linked sources, this is a local vulnerability with medium severity (CVSS 3.1: 5.5) and requires user interaction; expl...

CVE-2026-47642

CVE-2026-47642 is a Microsoft Office Excel vulnerability described as a use-after-free in Excel that enables a local attacker to execute code. The connected sources confirm the issue affects Microsoft Excel and is capable of arbitrary-code execution, with a CVSSv3.1 base score of 7.8 (HIGH). Atta...

CVE-2026-47290 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-47290 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-47642 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-47642 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-47290

CVE-2026-47290 is a Microsoft Office remote-code-execution vulnerability described as a use-after-free in Office components. Affected software includes Microsoft Office family (Word, Excel, PowerPoint, SharePoint) with the Office ecosystem cited in NCsc advisories and CIRCL sighting logs. The CVS...