CVE-2026-81385

Microsoft Office Publisher is affected by a deserialization of untrusted data vulnerability that allows an unauthorized, remote attacker to achieve remote code execution over a network with low complexity and no required privileges, though user interaction is required. The CVSS 3.1 score is 8.8 (...

EUVD-2026-73852

Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...

CVE-2026-81353

A heap-based buffer overflow in the HEIF Image Extensions component of the Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally . The vulnerability scores CVSS 7.8 (High) with a local attack vector, low complexity, no required privileges, but user interaction i...

CVE-2026-80082

CVE-2026-80082 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating network attack vector, low complexity, no priv...

EUVD-2026-73846

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...

CVE-2026-80081

CVE-2026-80081 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interacti...

EUVD-2026-73845

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

CVE-2026-80089

CVE-2026-80089 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a network vector, low attack complexity, no privileges required, and user interaction required, resultin...

CVE-2026-80090

CVE-2026-80090 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network. The attack requires user interaction (e.g., opening a crafted document) but needs no prior privileges , yielding a CVSS 3.1 score of 6.5 (MED...

EUVD-2026-73844

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73843

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...

CVE-2026-80091

Microsoft Office is affected by an information disclosure vulnerability caused by the use of an uninitialized resource . An unauthorized attacker can leverage this over a network to disclose information, though user interaction is required (CVSS: 6.5 MEDIUM , vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:...

CVE-2026-80088

CVE-2026-80088 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating that while user interaction is required...

EUVD-2026-73842

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73841

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73839

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network...

CVE-2026-80087

A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network , per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) scoring it 6.5 MEDIUM . The CISA SSVC assessment rates exploitation as none , automatability as no , and technica...

CVE-2026-80085

CVE-2026-80085 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a crafted document) but no prior authentication, yielding high impact to confidentialit...

EUVD-2026-73840

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-80086

CVE-2026-80086 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 base score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating a network-based attack with l...