CVE-2026-69797

CVE-2026-69797 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The attacker must persuade a user to open a crafted file, as the CVSS vector includes user interaction required (CVSS 3.1: 8.8 HIGH...

EUVD-2026-73242

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-69778

CVE-2026-69778 is a heap-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The CVSS v3.1 score is 8.8 (HIGH) with a network vector, low complexity, no required privileges, but user interaction required . CISA's SSVC assessment in...

CVE-2026-69767

CVE-2026-69767 is a use after free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interacti...

CVE-2026-69759

CVE-2026-69759 is a stack-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , with the vector requiring user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), meaning an a...

EUVD-2026-73240

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73241

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69529

CVE-2026-69529 is a heap-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The attack requires user interaction (e.g., opening a crafted file) but needs no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) , with impacts of high...

EUVD-2026-73239

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-69690

Microsoft Office SharePoint is affected by an improper neutralization of input during web page generation (cross-site scripting ), allowing an authorized attacker to perform spoofing over a network. The vulnerability requires low privileges and user interaction , with impacts limited to low confi...

EUVD-2026-73158

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...

CVE-2026-69739

CVE-2026-69739 is an out-of-bounds read in Microsoft Office that allows an unauthorized attacker to disclose information over a network . NVD assigns a CVSS 3.1 score of 7.5 (HIGH) with no user interaction required, while Microsoft's CNA assessment rates it 6.5 (MEDIUM) with user interaction requ...

EUVD-2026-73157

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-69719

CVE-2026-69719 is a buffer over-read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) , with a network attack vector, low complexity, no privileges required, and user interaction required , resu...

EUVD-2026-73156

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73154

Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...

CVE-2026-69742

CVE-2026-69742 is an integer overflow or wraparound vulnerability in Microsoft Office Publisher that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a low-complexity n...

EUVD-2026-73155

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69724

CVE-2026-69724 is a missing authorization vulnerability in Microsoft Office SharePoint that allows an authorized attacker to achieve remote code execution over a network. The Microsoft CNA rates it CVSS 3.1 Base 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attac...

CVE-2026-69716

Microsoft Office SharePoint is affected by a SQL injection vulnerability (improper neutralization of special elements in an SQL command) that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with network attack vector, low complexity, lo...