CVE-2026-63515 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-63515 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-63513 Microsoft Office Graphics Component Remote Code Execution Vulnerability

...

CVE-2026-63513

CVE-2026-63513 affects Microsoft Office (Graphics Component) via a heap-based buffer overflow that enables local code execution. The CVE is described as a Heap-based buffer overflow in Microsoft Office allowing an unauthorized attacker to execute code locally. CVSS 3.1 indicates LOCAL attack vect...

CVE-2026-63515

CVE-2026-63515 concerns an out-of-bounds read in Microsoft Office that enables local code execution when exploited by an attacker who must have some user interaction. The affected product is Microsoft Office; the root cause is an out-of-bounds read in the code path used during document handling. ...

EUVD-2026-56293

Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-57105

CVE-2026-57105 is a cross-site scripting vulnerability in Microsoft Office SharePoint caused by improper neutralization of input during web page generation. An authorized attacker could perform network spoofing. The CVSSv3.1 base score is 8.0 ( HIGH ) with Network attack vector, low attack comple...

EUVD-2026-56292

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

Powerpoint Information Disclosure Vulnerability

Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

Microsoft Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

Microsoft SharePoint Server Spoofing Vulnerability

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft Office Information Disclosure Vulnerability

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

Microsoft Office Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office allows an authorized attacker to elevate privileges locally...