CVE-2026-72974

Microsoft Office Excel is affected by a buffer over-read vulnerability that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N , meaning exploitation requires user interaction (likely opening ...

CVE-2026-72973

Microsoft Office Word is affected by a heap-based buffer overflow that can lead to Remote Code Execution over a network. An unauthorized attacker can execute code with no prior privileges, though user interaction is required (e.g., opening a crafted document). The vulnerability is rated CVSS 8.8 ...

EUVD-2026-73732

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-72938

CVE-2026-72938 is an information disclosure vulnerability in Microsoft Office PowerPoint caused by a type confusion flaw (accessing a resource using an incompatible type). An unauthorized attacker can exploit this over a network with low complexity and no privileges , though user interaction is r...

EUVD-2026-73731

Access of resource using incompatible type 'type confusion' in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-72972

Microsoft Office Word is affected by a heap-based buffer overflow that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e.g., open...

EUVD-2026-73729

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-72956

CVE-2026-72956 is an untrusted pointer dereference in Microsoft Office PowerPoint that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction and has a CVSS 3.1 base score of 6.5 (MEDIUM) with high confidentiality impact but no integri...

EUVD-2026-73730

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73724

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69904

A server-side request forgery (SSRF) vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. The flaw requires user interaction and low privileges (CVSS 3.1: 3.5 – LOW ). CISA's SSVC assessment indicates no known exploitation , the vulner...

CVE-2026-69632

A use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network . The attack requires user interaction (per CVSS vector UI:R) but no prior authentication. The CVSS v3.1 base score is 8.8 (HIGH) with full impact to confidentiality,...

EUVD-2026-73719

Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-69626

CVE-2026-69626 is a buffer over-read in Microsoft Office that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction but no prior privileges, and its primary impact is on confidentiality (high), with no effect on integrity or availabil...

EUVD-2026-73718

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73717

Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...

EUVD-2026-73716

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-69629

Microsoft Office Outlook is affected by a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network, resulting in Remote Code Execution . The flaw requires user interaction but no prior privileges, yielding a CVSS v3.1 score of 8.8 (HIGH) with hi...

EUVD-2026-73714

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-69636

CVE-2026-69636 is an SQL injection vulnerability in Microsoft Office SharePoint , caused by improper neutralization of special elements used in SQL commands. An authorized attacker with low privileges can exploit it over a network to disclose information , with high confidentiality impact but no ...