CVE-2026-50665

CVE-2026-50665 is described as an information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read, enabling a local attacker to disclose data. Public sources in the connected set reiterate the issue as a Microsoft Office vulnerability with potential to access sensitive in...

CVE-2026-56189

CVE-2026-56189 is a local, heap-based buffer overflow in Microsoft Windows Media Foundation. The affected component is Windows Media Foundation within Windows, and the vulnerability allows an unauthenticated local attacker to execute arbitrary code. The root cause is a heap-based overflow in the ...

CVE-2026-56188

CVE-2026-56188: A race-condition in the Windows Server Network driver (concurrent access to a shared resource) can allow an unauthenticated attacker to execute code over the network. The vulnerability affects the Windows Server Network driver and is described as a remote code execution flaw with ...

CVE-2026-56186

CVE-2026-56186 is a Windows Schannel vulnerability described as an out-of-bounds read that enables an authorized attacker to disclose information over a network. The CVE affects the Windows Schannel security component and is rated with CVSS v3.1 base score 8.1 (High) and NETWORK attack vector wit...

CVE-2026-56187

CVE-2026-56187 affects the Windows MIDI Service Module and is a use-after-free vulnerability that can lead to local privilege escalation for an authenticated/authorized attacker. Public sources in the connected set confirm the issue and point to a patch via Microsoft security updates (e.g., MSRC ...

CVE-2026-56184

CVE-2026-56184 describes a local information disclosure in Windows Win32K, enabling an authorized attacker to disclose sensitive information locally. The NVD entry notes a medium severity (CVSS v3.1: 5.5) with local access and low attack complexity but high confidentiality impact. Public details ...

CVE-2026-56190

CVE-2026-56190 is a Windows Remote Desktop Protocol vulnerability described as a use of an uninitialized resource in Windows RDP that allows an unauthenticated attacker to execute code over the network. The CVE has a very high severity (CVSSv3.1 base score 9.8, CRITICAL) and is referenced in Micr...

CVE-2026-56183

CVE-2026-56183 is a use-after-free vulnerability in the Windows MIDI Service Module that permits a locally authenticated attacker to achieve elevation of privileges. Affected component: Windows MIDI Service Module (CVE-2026-56183) with local attack vector and high impact (CVE described as Elevati...

CVE-2026-56182

CVE-2026-56182 is a Windows NTFS elevation-of-privilege vulnerability caused by an integer overflow/wraparound in NTFS operations that can be exploited by an authorized local attacker. Public sources in the connected data corroborate the root cause and the affected component is NTFS on Windows. T...

CVE-2026-56175

CVE-2026-56175 describes a heap-based buffer overflow in Windows NTFS that allows an authorized, local attacker to elevate privileges. Connected sources (Microsoft MSRC update, NVD, NTFS/CIRCL sightings) confirm the vulnerability is in Windows NTFS, with local-privilege-escalation potential and a...

CVE-2026-56176

CVE-2026-56176 – Windows Win32K GRFX: Affected component is the Win32K GRFX subsystem. The vulnerability is an out-of-bounds read that allows an authorized local attacker to elevate privileges on Windows. The CVE is backed by multiple sources in connected documents (NVD/NCSC and MS advisories) co...

CVE-2026-56168

CVE-2026-56168 : Null pointer dereference in Windows SMB Server can allow an authorized attacker to cause a Network-based Denial of Service. It targets the Windows SMB Server component and has a CVSS v3.1 base vector of Network, Low Attack Complexity, Privileges Required: Low, No User Interaction...

CVE-2026-56173

CVE-2026-56173 is a use-after-free vulnerability in Windows WebView that allows an authorized local attacker to escalate privileges. The issue is tied to the Windows WebView component and is listed with a high impact (local elevation of privileges) in the CVE entry. Connected sources corroborate ...

CVE-2026-56159

CVE-2026-56159 is a heap-based buffer overflow in Windows DHCP Server that can allow an unauthenticated attacker to execute code over a network (remote code execution). The vulnerability is rated CRITICAL with Network attack vector and no explicit exploit details in the provided documents. Connec...

CVE-2026-50359

CVE-2026-50359 is a Microsoft XML Core Services elevation-of-privilege vulnerability described as a use-after-free issue. The NVD/NCSC/CIRCL entries confirm local privilege escalation for an authorized user. No exploit vectors are provided in the documents. Microsoft has released updates addressi...

CVE-2026-56157

Summary: CVE-2026-56157 is described as an improper access-control vulnerability in Microsoft Office SharePoint that could enable an authorized attacker to spoof over a network. The connected documents consistently identify SharePoint (Office suite) as affected and describe the impact as spoofing...

CVE-2026-55949

CVE-2026-55949 affects Microsoft Office Excel. The issue is described as a use of an uninitialized resource enabling local code execution. CVSS 3.1 base score 7.8 (HIGH) with local attack vector, low attack complexity, no privileges required but user interaction is required. Exploitation details ...

CVE-2026-56156

CVE-2026-56156 is a heap-based buffer overflow in Microsoft Office Excel that enables local code execution. The affected software is Microsoft Office Excel (component of Office). Root cause described as a heap-based buffer overflow allowing an attacker to run code locally; exploitation requires l...

CVE-2026-55947

CVE-2026-55947 is a Microsoft Excel vulnerability described as a heap-based buffer overflow in Microsoft Office Excel that enables local code execution. Affected product: Microsoft Office Excel (Office suite). Root cause: heap-based buffer overflow in Excel components, leading to arbitrary code e...

CVE-2026-55944

CVE-2026-55944 affects Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises). The vulnerability is described as a deserialization of untrusted data in Dynamics NAV that could allow remote code execution over a network. Connected sources indicate this is addressed in Jul...

CVE-2026-55898

CVE-2026-55898 concerns an Out-of-bounds read in Microsoft Office Excel , enabling an unauthorized local attacker to disclose information. The available documents identify Excel as the affected product and describe the root cause as an out-of-bounds read that leads to information disclosure local...

CVE-2026-55145

The CVE-2026-55145 entry concerns Outlook Copilot and describes improper neutralization of special elements used in a command (command injection) that could allow an authorized attacker to tamper over a network. Connected sources corroborate with MSRC and NVD summaries and indicate exploitation s...

CVE-2026-54131

CVE-2026-54131 is an Office Excel vulnerability (use-after-free) that allows a local attacker to execute arbitrary code. Based on the sources, the issue affects Microsoft Excel components and stems from a use-after-free condition that can be triggered by handling crafted Excel objects/files, lead...

CVE-2026-54116

CVE-2026-54116 impacts Microsoft SQL Server components via a type-confusion flaw that could allow an authenticated, low-privilege attacker to disclose information over the network. The CVSSv3.1 base score is 6.5 (Medium); impact is confined to confidentiality. Affected products are SQL Server (pe...

CVE-2026-50468

CVE-2026-50468 affects Microsoft SQL Server. It is a buffer over-read that allows an authorized attacker to disclose information over the network. The published advisories indicate an impact of accessing sensitive data with a network attack vector and low privileges required; CVSS 3.1 base score ...

CVE-2026-55135

CVE-2026-55135 concerns a cross-site scripting spoofing vulnerability in Microsoft Office SharePoint. The connected sources identify the affected product as Microsoft SharePoint Server (part of Office/SharePoint), and describe the root cause as improper neutralization of input during web page gen...

CVE-2026-55120

CVE-2026-55120 is a heap-based buffer overflow in Microsoft Office PowerPoint that enables a local attacker to execute arbitrary code. The vulnerability is documented across multiple feeds (NVD, CIRCL, NCSC, CVE List) and is associated with PowerPoint, with exploitation requiring user interaction...

CVE-2026-55052

CVE-2026-55052 concerns a privilege-elevation flaw in Microsoft SharePoint (Office SharePoint). The description across sources is a missing authorization vulnerability that could let an authorized attacker elevate privileges over a network. Affected components/versions are centered on Microsoft O...

CVE-2026-55133

CVE-2026-55133 affects Microsoft Office OneNote. The issue is a heap-based buffer overflow in OneNote that can allow a local attacker to execute code on the affected system. CVSSv3.1 indicates ATT&CK: local access, user interaction required, with high impact to confidentiality, integrity, and ava...

CVE-2026-55123

CVE-2026-55123 is a heap-based buffer overflow in Microsoft Office PowerPoint that allows local code execution when a user opens a malicious file or link. Affected component is PowerPoint within Microsoft Office; root cause is a heap-based overflow leading to arbitrary code execution. Microsoft’s...

CVE-2026-55139

Technical details for CVE-2026-55139 are not publicly available in the provided documents. Available sources mention exposure in Microsoft Office but do not specify affected products, versions, root cause, or remediation. Monitor for official updates.

CVE-2026-55043

CVE-2026-55043 is a heap-based buffer overflow in Microsoft Office PowerPoint that allows an attacker to execute code locally. The vulnerability affects PowerPoint files (triggered by opening a crafted document) and is categorized with a high impact (local code execution) in CVSS 3.1, with exploi...

CVE-2026-55042

Technical details about CVE-2026-55042 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-55128

CVE-2026-55128 is a Use-after-free in Microsoft Word that enables local code execution by an unauthenticated attacker who powers the exploit via a crafted file/link. Affected product scope is Microsoft Word/Office as per Microsoft advisories; document does not specify exact vulnerable builds or p...

CVE-2026-55130

CVE-2026-55130 describes a heap-based buffer overflow in Microsoft Word (Office) that allows an authenticated attacker to achieve local code execution . The CVE entry lists a LOCAL attack vector, with user interaction required and high impact on confidentiality, integrity, and availability. Conne...

CVE-2026-55142

Microsoft Word within Office is affected by CVE-2026-55142 due to a numeric truncation error that can disclose information locally. Exploitation is local with required user interaction; the advisory notes a security update from Microsoft as remediation. References to July 2026 Office advisories c...

CVE-2026-55140

CVE-2026-55140 is a Microsoft Office remote code execution vulnerability caused by a heap-based buffer overflow in Office components. An unauthorized attacker could exploit this locally to run arbitrary code on a vulnerable system, as described in multiple security sources. Connected documents co...

CVE-2026-55040

CVE-2026-55040 is a SharePoint Server vulnerability described as a security feature bypass caused by weak authentication. The affected products mentioned in the connected documents are SharePoint Server Subscription Edition, as well as SharePoint Server 2019 and 2016. Patch guidance is present in...

CVE-2026-55056

CVE-2026-55056 is a heap-based buffer overflow in Microsoft Office that enables local code execution via parsing/processing of Office documents. Affected: Microsoft Office and related components. Root cause: heap-based overflow. Impact: unauthorized local code execution with high severity. Status...

CVE-2026-55134

CVE-2026-55134 is a stack-based buffer overflow in Microsoft Word (Office) that can allow a local attacker to execute arbitrary code. The CVE entry is corroborated by multiple sources in the Connected documents, which identify Word as the affected component and describe local code execution as th...

CVE-2026-55051

CVE-2026-55051 is a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Office SharePoint that allows an authorized attacker to disclose information over a network. The CVE is documented with CVSS v3.1 base score 6.5 (MEDIUM), network attack vector, low attack complexity, privileges req...

CVE-2026-55126

CVE-2026-55126 concerns Microsoft Office SharePoint (SharePoint Server) with an XSS flaw described as improper neutralization of input during web page generation, enabling an authorized attacker to perform spoofing over a network. The CVSS 3.1 base metrics: AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N, ba...

CVE-2026-55057

Microsoft Office vulnerability CVE-2026-55057 is an information disclosure caused by an integer overflow/wraparound in Office components. The issue allows a local attacker to disclose information. Microsoft has published a July 2026 security update (KB5002887) addressing this vulnerability; apply...

CVE-2026-55131

Root cause: a heap-based buffer overflow in Microsoft Office Excel (part of Microsoft Office) allows an attacker to execute code locally. Affected: Excel; vulnerability appears to enable local code execution upon exploitation of the overflow. CVSSv3.1 metrics indicate Local access, No privileges ...

CVE-2026-55122

Technical details for CVE-2026-55122 are not publicly provided in the connected documents. The materials reference Excel Office vulnerabilities generally without specifics. Monitor for updates.

CVE-2026-55053

CVE-2026-55053 – Microsoft Excel heap-based buffer overflow in Microsoft Office Excel enables a local attacker to execute arbitrary code. The issue is described as a heap-based overflow affecting Excel, with the CVSS v3.1 vector indicating local attack, low attack complexity, and user interaction...

CVE-2026-55132

Microsoft Word/Office vulnerability CVE-2026-55132 involves a double-free in Word that could allow a local attacker to execute arbitrary code. Affected product: Microsoft Word (Office suite). Root cause: memory management flaw (double free) in Word’s handling of certain documents. Impact: local c...

CVE-2026-55137

CVE-2026-55137 in Microsoft Excel is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized, locally executed code when a user opens a malicious file or link. The CVSS 3.1 vector (L, L, N, R, U, C/H/I/H/A/H) indicates a HIGH-severity, local attack requiring user intera...

CVE-2026-55038

CVE-2026-55038 is a stack-based buffer overflow in Microsoft Word (Office) that can allow local code execution. The vulnerability affects Word and is exploitable by a crafted file opened by a user with no privileges required, though user interaction is needed (per CVSS: LOCAL, UI: REQUIRED, Privi...

CVE-2026-55058

CVE-2026-55058 is an out-of-bounds read vulnerability in Microsoft Office Excel . The issue enables a local attacker to achieve remote code execution on a vulnerable system, as indicated by the CVSS vector: LOCAL attack, LOW attack complexity, with no privileges required and user interaction need...