EUVD-2026-73306

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73305

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-78515

CVE-2026-78515 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized, remote attacker to disclose information over a network. The attack requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 scores it 6.5 (Medium) with high confidentia...

CVE-2026-78502

An out-of-bounds read in Microsoft Office Word allows an unauthorized, remote attacker to disclose information over a network, provided the victim opens a crafted document (user interaction required). The CVSS 3.1 base score is 6.5 (MEDIUM) with high confidentiality impact but no integrity or ava...

EUVD-2026-73304

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78511

CVE-2026-78511 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted document), with no prior privileges needed and low attack complexity. ...

EUVD-2026-73289

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2026-73290

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-77898

CVE-2026-77898 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted file) and has a high attack complexity , reflected in its CVSS 3.1 score of...

CVE-2026-69282

This vulnerability in Microsoft Office SharePoint stems from improper access control , allowing an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity but requi...

EUVD-2026-73287

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-69285

A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning it requires user interaction but no prior authentication....

EUVD-2026-73288

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2026-73286

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2026-73274

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-77504

CVE-2026-77504 is a double free flaw in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network with user interaction required. The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) with full confidentiality, integrity, and availability impact...

CVE-2026-69804

A time-of-check time-of-use (TOCTOU) race condition in Microsoft Office SharePoint allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The vulnerability is rated CVSS 7.5 (HIGH) with high impact to confidentiality, integrity, and availability...

EUVD-2026-73245

Time-of-check time-of-use toctou race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2026-73244

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

CVE-2026-69797

CVE-2026-69797 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The attacker must persuade a user to open a crafted file, as the CVSS vector includes user interaction required (CVSS 3.1: 8.8 HIGH...