165965 matches found
CVE-2026-78522
CVE-2026-78522 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interaction (e.g...
CVE-2026-80073
CVE-2026-80073 is an out-of-bounds read vulnerability in Microsoft Office Outlook that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction but no prior privileges, and results in a HIGH confidentiality impact with no integrity or ava...
EUVD-2026-73828
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73829
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73827
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78521
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The attack requires user interaction (e.g., opening a malicious document) but no prior auth...
EUVD-2026-73826
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-78519
CVE-2026-78519 is a use of uninitialized resource vulnerability in Microsoft Office Outlook that allows an unauthorized, remote attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with low attack complexity and no privileges required, though user interaction is required to...
CVE-2026-80079
CVE-2026-80079 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized, remote attacker to disclose information over a network. The CVSS 3.1 base score is 6.5 (Medium) (AV:N/AC:L/PR:N/UI:R/C:H). CISA's SSVC assessment indicates no known exploitation , not autom...
EUVD-2026-73825
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-78503
CVE-2026-78503 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The assigned CVSS 3.1 base score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interac...
EUVD-2026-73820
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-78512
Microsoft Office Word is affected by a numeric truncation error that allows an unauthorized attacker to achieve remote code execution over a network. Exploitation requires user interaction (e.g., opening a crafted document) but no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) with full impac...
CVE-2026-78514
CVE-2026-78514 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e....
EUVD-2026-73818
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73819
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78507
CVE-2026-78507 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior privileges. The CVSS 3.1 score is 8.8 (High) with ...
CVE-2026-78506
Microsoft Office Word contains an improper null termination vulnerability that allows an unauthorized attacker to disclose information locally . The flaw requires user interaction and no special privileges, with a high confidentiality impact but no integrity or availability impact, rated CVSS 5.5...