CVE-2026-20950 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-20949

CVE-2026-20949 is a Microsoft Excel/Office security feature bypass vulnerability described as an improper access control issue that could allow a local attacker to bypass a security feature. Multiple sources (NVD, MSRC, CNVD, EUVD) consistently identify Excel as affected and classify the impact a...

CVE-2026-20948

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-20948 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2026-20948 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2026-20948

The CVE-2026-20948 entry affects Microsoft Word (Office Word). It is described as an Untrusted pointer dereference in Microsoft Office Word that allows an unauthorized attacker to execute code locally (remote code execution). The issue is evidenced by multiple sources, with a CVSS v3.1 base score...

CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-20947

CVE-2026-20947 is a Microsoft SharePoint/Office SharePoint Remote Code Execution vulnerability caused by improper neutralization of SQL elements in SharePoint. An attacker can trigger code execution over the network with low privileges and no user interaction on affected SharePoint Server deploym...

CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-20963 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-20959

CVE-2026-20959 is a cross-site scripting vulnerability in Microsoft Office SharePoint (Server/Subscription Edition) caused by improper neutralization of input during web page generation. An authorized attacker could spoof a user over the network. Affected products include SharePoint Server (2016/...

EUVD-2026-2114

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-20959 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-20959 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-20963 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-20963

CVE-2026-20963 is a Microsoft SharePoint vulnerability described as deserialization of untrusted data (CWE-502) that enables a network-based code execution attack. The current description states an unauthenticated attacker can execute code over the network. Vendor discussions note a CVSSv3.1 vect...

CVE-2026-20956 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-20956 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-20956

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-20956

CVE-2026-20956 is a Microsoft Excel remote code execution vulnerability caused by an untrusted pointer dereference in Excel. Affected: Microsoft Excel/Office components, with user interaction required for exploitation on a local fault. Public advisories and multiple CVE lists corroborate Excel as...