24335 matches found
CVE-2026-55023
CVE-2026-55023 is a Microsoft Office information-disclosure vulnerability described as an out-of-bounds read that could allow a local attacker to disclose information. CVSS v3.1 base score 5.5 (MEDIUM): attack vector LOCAL, attack complexity LOW, privileges required NONE, user interaction REQUIRE...
EUVD-2026-44165
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-44164
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
EUVD-2026-44162
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-55018 Microsoft Office Remote Code Execution Vulnerability
...
EUVD-2026-44163
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-55018 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-55018
CVE-2026-55018 is a use-after-free in Microsoft Office that enables local code execution. The vulnerability is listed among Microsoft Office family issues and is part of July 2026 updates; exploitation requires the user to open a malicious Office file or link (SharePoint variants may not require ...
EUVD-2026-44160
Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-44161
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-55017 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-55017
Mode C: CVE-2026-55017 is a heap-based buffer overflow affecting Microsoft Office, enabling a local attacker to execute code. The available connected documents confirm this vulnerability within Microsoft Office products (Office components cited in the NCSC advisory and multiple CVE trackers). Roo...
CVE-2026-55017 Microsoft Office Remote Code Execution Vulnerability
...
EUVD-2026-44158
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-50314 Microsoft Office Remote Code Execution Vulnerability
...
EUVD-2026-44156
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-50314
CVE-2026-50314 is a Microsoft Office use-after-free vulnerability that enables a local attacker to execute arbitrary code by convincing a user to open a malicious document or link (Office components implicated include Word/Excel/PowerPoint/SharePoint per provided sources). The issue is described ...
EUVD-2026-44157
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-50467
CVE-2026-50467 is a use-after-free vulnerability in Microsoft Office that can allow an attacker to execute code locally. The linked sources (Microsoft and third-party advisories) confirm Office as the affected product and describe the underlying issue as a use-after-free leading to arbitrary code...