Microsoft Excel Buffer Overflow

The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office SharePoint Server Privilege Escalation

The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps for Enterprise is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute...

Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts

Compromised hotel Wi-Fi gateways redirect business travelers to fake Microsoft 365 login pages allowing attackers to steal credentials and authorization tokens...

CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability

...

EUVD-2026-48457

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network...

CVE-2026-50517

CVE-2026-50517 describes a deserialization vulnerability in Microsoft 365 Copilot (M365 Copilot) that enables an authorized attacker to execute code over the network. The issue is triggered by deserializing untrusted data, with a critical CVSS v3.1 score (9.9, CRITICAL) and a network attack vecto...

CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability

...

PT-2026-64203

Name of the Vulnerable Software and Affected Versions Microsoft M365 Copilot affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute code over a network. Deserialization is the process of converting a data stream back into an object,...

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050

A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out stolen files as attachments on calendar events dated to the year 2050. Group-IB, which named the malware HollowGraph , says the approach...

Microsoft Excel Office Privilege Escalation

The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server packages is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

Microsoft Word Buffer Overflow

The vulnerability of Microsoft Word, the Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise, as well as the Microsoft Office Server and Microsoft 365 Apps for Enterprise products, is related to buffer overflow in dynamic memory...

monkey365 v0.98.5

Monkey365 is an open-source security assessment framework for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals, consultants, administrators, and incident responders identify misconfigurations, review cloud security posture, and evaluate environments against industry...

ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files

ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session tokens, PDFs, Microsoft 365 documents, and files from synced OneDrive and SharePoint folders. It gets in because someone pasted a command into a Run box and...

Microsoft SharePoint Server Office 365 Apps for Enterprise Disclosure Information

The vulnerability of Microsoft SharePoint Server, Microsoft Office, and Microsoft 365 Apps for Enterprise programs is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these system...

Microsoft Excel editors Information Disclosure

The vulnerability of Microsoft Excel editors, Office Online Server, Microsoft Office software packages, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

Microsoft Excel editors Code Execution

The vulnerability of Microsoft Excel editors, Office Online Server, Microsoft Office programs, and Microsoft 365 Apps for Enterprise is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Package Buffer Overflow Information Disclosure

The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Microsoft 365 Copilot Intelligent Virtual Assistant Privilege Escalation

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

CVE-2026-59864

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, "kiota plugin add" and "kiota plugin generate" with "-t APIPlugin" emitted attacker-controlled statictemplate.file values from x-ai-adaptive-card and x-ai-capabilities into generated Microsoft 365 Copilot and Teams...

CVE-2026-54733: Improper Verification of Cryptographic Signature

The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin localo365 Teams SSO endpoint ssologin.php base64-decodes a JWT payload and authenticates...