24152 matches found
CVE-2026-69402
CVE-2026-69402 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint , caused by improper neutralization of input during web page generation. An authorized attacker (low privileges required) can exploit it over the network with low complexity and user interaction to perform...
EUVD-2026-73694
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-73643
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-64918
CVE-2026-64918 is a spoofing vulnerability in Microsoft Office caused by insufficiently protected credentials , allowing an unauthorized attacker to perform spoofing over a network. The attack requires user interaction but needs no prior privileges and has low complexity , with a high impact on c...
CVE-2026-69360
CVE-2026-69360 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior authentication. The assigned CVSS v3.1 score is 8.8 ...
EUVD-2026-73475
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-68843
CVE-2026-68843 is a use-after-free vulnerability in Microsoft Office Word that allows an authorized attacker to disclose information locally. The flaw resides in Word's handling of memory objects, where freed memory is subsequently accessed, potentially leaking sensitive data to a local user with...
EUVD-2026-73315
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-78518
CVE-2026-78518 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, no privileges required, but user interaction requi...
CVE-2026-78509
CVE-2026-78509 is a heap-based buffer overflow in Microsoft Office Outlook that allows an unauthorized, remote attacker to achieve code execution over a network with no user interaction. The CNA-assigned CVSS 3.1 score is 9.8 (Critical) , reflecting low attack complexity and full impact on confid...
EUVD-2026-73312
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78517
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized, remote attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, no required privileges, but user interaction required. CISA's SSVC assessment rates exploi...
EUVD-2026-73310
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
CVE-2026-78504
CVE-2026-78504 is a stack-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 3.1: 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user inter...
EUVD-2026-73311
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78513
CVE-2026-78513 is an out-of-bounds read in Microsoft Office PowerPoint that allows an unauthorized local attacker to disclose information . The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 score is 5.5 (MEDIUM) with high confidentiality ...
EUVD-2026-73308
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78510
CVE-2026-78510 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to execute code over a network . The vulnerability is scored CVSS 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N, meaning it requires no user interaction or prior authentication. No p...
CVE-2026-78505
CVE-2026-78505 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code over a network. The vulnerability is rated CVSS 3.1 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , meaning exploitation requires user interaction but no prior...