CVE-2026-58644

CVE-2026-58644 – Microsoft SharePoint Deserialization of Untrusted Data (Server) involves a deserialization flaw in SharePoint Server that allows an unauthenticated attacker to execute arbitrary code over a network. The vulnerability affects Microsoft Office SharePoint/SharePoint Server component...

CVE-2026-58618

CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...

CVE-2026-50522

CVE-2026-50522 is a deserialization flaw in Microsoft Office SharePoint that enables remote code execution over a network. Affected products include on‑premises SharePoint Server variants (Server 2016/2019, Subscription Edition, Enterprise Server). The root cause is deserialization of untrusted d...

CVE-2026-56193 Microsoft Office Information Disclosure Vulnerability

...

CVE-2026-56193 Microsoft Office Information Disclosure Vulnerability

...

CVE-2026-56193

CVE-2026-56193 describes an out-of-bounds read in Microsoft Office that allows a local attacker to disclose information. The available records indicate a high-severity impact (Confidentiality and Availability) with local access and user interaction required, but no explicit details on affected Of...

CVE-2026-56164

CVE-2026-56164 is a Microsoft SharePoint Server elevation-of-privilege vulnerability described as missing authentication for a critical function, enabling a remote attacker to elevate privileges over a network. Public advisories indicate widespread Office-related vulnerabilities, with SharePoint ...

CVE-2026-56164

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-55948

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-50675

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-54108

CVE-2026-54108 affects Microsoft SharePoint Server. An authorized attacker can influence a file name or path in SharePoint, enabling network-based spoofing. CVSS v3.1: 6.5 (MEDIUM), AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. Root cause details are not provided in the supplied documents; no exploitation...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...