CVE-2026-72976

CVE-2026-72976 is an out-of-bounds read in Microsoft Office Word that allows an authorized attacker with low privileges to disclose information locally. Exploitation requires user interaction, with no integrity or availability impact. The CVSS 3.1 base score is 5.0 (MEDIUM) (AV:L/AC:L/PR:L/UI:R/S...

EUVD-2026-73735

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73736

Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally...

CVE-2026-72975

CVE-2026-72975 is an out-of-bounds read in Microsoft Office PowerPoint that allows an unauthenticated remote attacker to disclose information over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 scores it 6.5 (Medium) , with ...

CVE-2026-72974

Microsoft Office Excel is affected by a buffer over-read vulnerability that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N , meaning exploitation requires user interaction (likely opening ...

EUVD-2026-73734

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73732

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-72973

Microsoft Office Word is affected by a heap-based buffer overflow that can lead to Remote Code Execution over a network. An unauthorized attacker can execute code with no prior privileges, though user interaction is required (e.g., opening a crafted document). The vulnerability is rated CVSS 8.8 ...

EUVD-2026-73731

Access of resource using incompatible type 'type confusion' in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-72972

Microsoft Office Word is affected by a heap-based buffer overflow that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e.g., open...

CVE-2026-72956

CVE-2026-72956 is an untrusted pointer dereference in Microsoft Office PowerPoint that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction and has a CVSS 3.1 base score of 6.5 (MEDIUM) with high confidentiality impact but no integri...

EUVD-2026-73730

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73719

Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-69632

A use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network . The attack requires user interaction (per CVSS vector UI:R) but no prior authentication. The CVSS v3.1 base score is 8.8 (HIGH) with full impact to confidentiality,...

CVE-2026-69477

A heap-based buffer overflow in Microsoft Office Access allows an authorized attacker with local access and low privileges to execute code, provided user interaction is required. The vulnerability is rated CVSS 7.3 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, reflecting full impac...

EUVD-2026-73717

Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...

EUVD-2026-73718

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network...

CVE-2026-69626

CVE-2026-69626 is a buffer over-read in Microsoft Office that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction but no prior privileges, and its primary impact is on confidentiality (high), with no effect on integrity or availabil...

EUVD-2026-73714

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-69614

CVE-2026-69614 is a stack-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (HIGH) , with a vector of network attack, low complexity, no privileges required, and user interac...