228 matches found
CVE-2026-55130
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-55134
CVE-2026-55134 is a stack-based buffer overflow in Microsoft Word (Office) that can allow a local attacker to execute arbitrary code. The CVE entry is corroborated by multiple sources in the Connected documents, which identify Word as the affected component and describe local code execution as th...
CVE-2026-55032 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-55050 Microsoft Word Information Disclosure Vulnerability
...
CVE-2026-55050
CVE-2026-55050 is a Microsoft Word vulnerability: an out-of-bounds read could allow a local attacker to disclose information. Affected software is Microsoft Word (Office suite). Root cause is an out-of-bounds read in Word, enabling local information disclosure. Base CVSS 3.1 score is 5.5 (Medium)...
Description of the security update for SharePoint Server 2016: June 9, 2026 (KB5002880)
None None...
CVE-2026-45486
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-45457 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-47635 Microsoft Outlook and Word Remote Code Execution Vulnerability
...
CVE-2026-45466
CVE-2026-45466 : Heap-based buffer overflow in Microsoft Word can allow a local attacker to disclose information. Affected product: Microsoft Word (Office). Vulnerability type: heap-based overflow in Word’s handling of content. Impact: confidentiality leakage (low), local access required with use...
CVE-2026-45458 Microsoft Outlook and Word Remote Code Execution Vulnerability
...
CVE-2026-45456 Microsoft Outlook and Word Remote Code Execution Vulnerability
...
CVE-2026-45456 Microsoft Outlook and Word Remote Code Execution Vulnerability
...
CVE-2026-45486 Microsoft Word Remote Code Execution Vulnerability
...
Description of the security update for SharePoint Server 2016 Language Pack: June 9, 2026 (KB5002881)
None None...
PT-2026-47710
CVE-2024-56123 - Microsoft Word XML External Entity Injection CVE ID :CVE-2024-56123 Published : June 8, 2026, 10:16 a.m. | 44 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for more details,...
Description of the security update for SharePoint Server 2016: May 12, 2026 (KB5002868)
None None...
CVE-2026-35440
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-40421 Microsoft Word Information Disclosure Vulnerability
...
CVE-2026-40421
CVE-2026-40421 affects Microsoft Word (Office) with vulnerability caused by external control of a file name or path in Word. This leads to an information disclosure over a network. The CVE is referenced alongside a Word 2016 security update (KB5002858) that addresses multiple related CVEs includi...