EUVD-2026-73731

Access of resource using incompatible type 'type confusion' in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-72956

CVE-2026-72956 is an untrusted pointer dereference in Microsoft Office PowerPoint that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction and has a CVSS 3.1 base score of 6.5 (MEDIUM) with high confidentiality impact but no integri...

CVE-2026-72972

Microsoft Office Word is affected by a heap-based buffer overflow that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e.g., open...

EUVD-2026-73730

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73719

Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-69632

A use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network . The attack requires user interaction (per CVSS vector UI:R) but no prior authentication. The CVSS v3.1 base score is 8.8 (HIGH) with full impact to confidentiality,...

CVE-2026-69477

A heap-based buffer overflow in Microsoft Office Access allows an authorized attacker with local access and low privileges to execute code, provided user interaction is required. The vulnerability is rated CVSS 7.3 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, reflecting full impac...

EUVD-2026-73717

Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...

EUVD-2026-73718

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network...

CVE-2026-69626

CVE-2026-69626 is a buffer over-read in Microsoft Office that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction but no prior privileges, and its primary impact is on confidentiality (high), with no effect on integrity or availabil...

EUVD-2026-73714

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-69614

CVE-2026-69614 is a stack-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (HIGH) , with a vector of network attack, low complexity, no privileges required, and user interac...

EUVD-2026-73715

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69636

CVE-2026-69636 is an SQL injection vulnerability in Microsoft Office SharePoint , caused by improper neutralization of special elements used in SQL commands. An authorized attacker with low privileges can exploit it over a network to disclose information , with high confidentiality impact but no ...

EUVD-2026-73713

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-69464

Microsoft Office SharePoint contains an elevation of privilege vulnerability characterized as execution with unnecessary privileges. An authorized attacker with low privileges can exploit this over a network to escalate their access, with high impact on confidentiality, integrity, and availabilit...

EUVD-2026-73712

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-73711

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-69442

CVE-2026-69442 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized, remote attacker to execute code over a network, requiring user interaction. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, and no privileges required, but user interac...

CVE-2026-69409

Microsoft Office SharePoint is affected by an information disclosure vulnerability caused by execution with unnecessary privileges , allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) with high confidentiality impact but no integrity or avai...