CVE-2026-78509

CVE-2026-78509 is a heap-based buffer overflow in Microsoft Office Outlook that allows an unauthorized, remote attacker to achieve code execution over a network with no user interaction. The CNA-assigned CVSS 3.1 score is 9.8 (Critical) , reflecting low attack complexity and full impact on confid...

CVE-2026-78517

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized, remote attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, no required privileges, but user interaction required. CISA's SSVC assessment rates exploi...

EUVD-2026-73312

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73313

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

EUVD-2026-73311

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78513

CVE-2026-78513 is an out-of-bounds read in Microsoft Office PowerPoint that allows an unauthorized local attacker to disclose information . The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 score is 5.5 (MEDIUM) with high confidentiality ...

EUVD-2026-73310

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-78504

CVE-2026-78504 is a stack-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 3.1: 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user inter...

CVE-2026-78510

A heap-based buffer overflow exists in Microsoft Office and Microsoft 365 Apps for Enterprise packages, specifically affecting Microsoft Word and Microsoft Outlook . This vulnerability allows an unauthorized attacker to execute arbitrary code. While the Initial Description mentions local executio...

EUVD-2026-73308

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78505

CVE-2026-78505 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code over a network. The vulnerability is rated CVSS 3.1 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , meaning exploitation requires user interaction but no prior...

EUVD-2026-73307

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

EUVD-2026-73306

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

CVE-2026-78515

CVE-2026-78515 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized, remote attacker to disclose information over a network. The attack requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 scores it 6.5 (Medium) with high confidentia...

EUVD-2026-73305

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-78502

An out-of-bounds read in Microsoft Office Word allows an unauthorized, remote attacker to disclose information over a network, provided the victim opens a crafted document (user interaction required). The CVSS 3.1 base score is 6.5 (MEDIUM) with high confidentiality impact but no integrity or ava...

CVE-2026-78511

CVE-2026-78511 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted document), with no prior privileges needed and low attack complexity. ...

EUVD-2026-73304

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73296

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-78439

CVE-2026-78439 is a stack-based buffer overflow in the Microsoft Office Graphics Component that allows an unauthorized attacker to execute code over a network, rated CVSS 3.1: 8.8 (High) . The attack vector is network-based with low complexity and no privileges required , though user interaction ...