CVE-2026-80073

CVE-2026-80073 is an out-of-bounds read vulnerability in Microsoft Office Outlook that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction but no prior privileges, and results in a HIGH confidentiality impact with no integrity or ava...

EUVD-2026-73827

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78521

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The attack requires user interaction (e.g., opening a malicious document) but no prior auth...

EUVD-2026-73826

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-80079

CVE-2026-80079 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized, remote attacker to disclose information over a network. The CVSS 3.1 base score is 6.5 (Medium) (AV:N/AC:L/PR:N/UI:R/C:H). CISA's SSVC assessment indicates no known exploitation , not autom...

CVE-2026-78519

CVE-2026-78519 is a use of uninitialized resource vulnerability in Microsoft Office Outlook that allows an unauthorized, remote attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with low attack complexity and no privileges required, though user interaction is required to...

EUVD-2026-73820

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-78503

CVE-2026-78503 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The assigned CVSS 3.1 base score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interac...

CVE-2026-78514

CVE-2026-78514 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e....

EUVD-2026-73819

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78512

Microsoft Office Word is affected by a numeric truncation error that allows an unauthorized attacker to achieve remote code execution over a network. Exploitation requires user interaction (e.g., opening a crafted document) but no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) with full impac...

CVE-2026-78507

CVE-2026-78507 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior privileges. The CVSS 3.1 score is 8.8 (High) with ...

EUVD-2026-73816

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78506

Microsoft Office Word contains an improper null termination vulnerability that allows an unauthorized attacker to disclose information locally . The flaw requires user interaction and no special privileges, with a high confidentiality impact but no integrity or availability impact, rated CVSS 5.5...

EUVD-2026-73817

Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-77911

CVE-2026-77911 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The flaw requires user interaction and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availabilit...

EUVD-2026-73793

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73790

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-77901

A null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (e.g., opening a crafted document) but no prior authentication. CISA rates the technical impact as total while noting exploitation is cur...

CVE-2026-69465

Microsoft Office SharePoint is affected by a missing authorization flaw that allows an authorized attacker to execute code over a network (remote code execution). The Microsoft CNA rates the severity as CVSS 3.1 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitatio...