23672 matches found
CVE-2026-47635
CVE-2026-47635 concerns a type-confusion vulnerability in Microsoft Office components (notably Outlook and Word) that allows an unauthenticated/user-local attacker to execute code locally. The underlying issue is a resource access type mismatch that can lead to remote attack surfaces when process...
CVE-2026-47636
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-47635
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-47298
CVE-2026-47298 constrains Microsoft Office SharePoint, where improper authorization allows an attacker with network access to execute code on vulnerable systems. The vulnerability is described as a remote code execution issue with a high impact on confidentiality, integrity, and availability (CVE...
CVE-2026-45649 Office for Android Spoofing Vulnerability
...
CVE-2026-45649
CVE-2026-45649 : Improper access control in Office for Android allows an unauthorized attacker to perform local spoofing. This is a local attack with user interaction required; impact on confidentiality and integrity is high, availability not affected. Connected documents confirm an Office for An...
CVE-2026-45649
Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally...
CVE-2026-45649 Office for Android Spoofing Vulnerability
...
CVE-2026-45645
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-45645 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-45645 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-45645
The provided data identify CVE-2026-45645 as a heap-based buffer overflow affecting Microsoft Office, enabling local code execution. Details show an exploit would require user interaction and has a local attack surface (attackVector: LOCAL, userInteraction: REQUIRED) with high impacts on confiden...
CVE-2026-45461 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-45461 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-45461
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-45461
CVE-2026-45461 describes a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. Documents confirm the vulnerability exists in Microsoft Office and indicate a local attack vector with high impact (C: HIGH, I: HIGH, A: HIGH) and a base score o...
CVE-2026-45460
CVE-2026-45460 is an information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read in a Microsoft Office component. It allows a local, unauthenticated attacker to disclose information (confidentiality impact). The CVSSv3.1 metrics indicate a Local attack vector, High ex...
CVE-2026-45460
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally...