CVE-2026-55050

CVE-2026-55050 is a Microsoft Word vulnerability: an out-of-bounds read could allow a local attacker to disclose information. Affected software is Microsoft Word (Office suite). Root cause is an out-of-bounds read in Word, enabling local information disclosure. Base CVSS 3.1 score is 5.5 (Medium)...

CVE-2026-55045

CVE-2026-55045 is an Office remote code execution vulnerability described as an out-of-bounds read in Microsoft Office that could enable a local attacker to execute code. Connected sources tie this CVE to Microsoft Office components (Word/PowerPoint/SharePoint) with local-exploit prerequisites an...

CVE-2026-55039

CVE-2026-55039 affects Microsoft Excel (Office suite). The vulnerability is described as an integer underflow/wraparound in Excel that can allow an attacker to execute arbitrary code locally. According to the CVE record and linked advisories, the impact is remote code execution on the target mach...

CVE-2026-55047

CVE-2026-55047 is a local, information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read. The NCSC advisory confirms presence across Microsoft Office offerings (Word, Excel, PowerPoint, SharePoint, and others) with an impact categorized as data exposure. Exploitation wo...

CVE-2026-55028

CVE-2026-55028 is an Office vulnerability described as an out-of-bounds read in Microsoft Office that allows an unauthorized attacker to disclose information locally. The CVE is tied to Office components (Word/Excel/PowerPoint/SharePoint) and is listed with a local attack vector, requiring user i...

CVE-2026-55029

CVE-2026-55029 is a heap-based buffer overflow affecting Microsoft Excel (part of Microsoft Office). The connected sources consistently describe the vulnerability as allowing an unauthenticated attacker to execute arbitrary code locally by crafting a malicious Excel/Office file, with the impact d...

CVE-2026-55027

CVE-2026-55027 is a Microsoft Office information-disclosure vulnerability described as an out-of-bounds read that can disclose local information. The CVE entry notes a local attacker with no privileges can trigger the issue, requiring user interaction (per CVSS: AV:L/AC:L/PR:N/UI:R). Connected so...

CVE-2026-55048

CVE-2026-55048 affects Microsoft Office Excel (and overall Office ecosystem in related advisories) with an integer overflow/wraparound in Excel leading to local code execution. The official CVE notes an unauthorized attacker can execute code locally; attack vector is LOCAL with user interaction r...

CVE-2026-55034

CVE-2026-55034 affects Microsoft Office SharePoint (SharePoint Server) and is triggered by improper neutralization of input during web page generation, enabling an authorized attacker to spoof over a network. The CVSS 3.1 base score is 7.3 (HIGH): network attack vector, low attack complexity, pri...

CVE-2026-55026

CVE-2026-55026 is an Office-related vulnerability caused by an integer overflow/wraparound in Microsoft Office that enables local information disclosure. Affected: Microsoft Office components; root cause per the CVE entry is integer overflow. Impact per NVD: Confidentiality impact HIGH, no integr...

CVE-2026-55125

CVE-2026-55125 is a Microsoft Office heap-based buffer overflow that enables local code execution. The NVD entry reports a CVSS v3.1 base score of 7.8 (LOCAL, HIGH impact across confidentiality, integrity, and availability) with user interaction required. Connected sources corroborate Office-wide...

CVE-2026-55031

CVE-2026-55031 is a Microsoft Office Excel vulnerability described as an out-of-bounds read that allows a locally authenticated attacker to execute code. The CVSS‑3.1 vector is Local, with Low attack complexity, and no privileges required, but user interaction is required and the impact is High f...

CVE-2026-55025

CVE-2026-55025 affects Microsoft Office Excel. Root cause: a type confusion in Excel handling resources that allows an unauthenticated attacker to run arbitrary code locally. The vulnerability is classified as high impact (CVSSv3.1: 7.8, High) with local attack vector, no privileges required, but...

CVE-2026-55030

CVE-2026-55030 affects Microsoft Office SharePoint (Server). The vulnerability is caused by improper neutralization of input during web page generation, enabling spoofing over a network by an authorized attacker. The associated CVSS 3.1 base score is 4.6 (Medium) with network access, low attack c...

CVE-2026-55022

CVE-2026-55022 is a type-confusion vulnerability in Microsoft Office that could allow local code execution when a user opens a specially crafted file or clicks a malicious link in Office applications (Word/Excel/PowerPoint/SharePoint are affected as listed by public advisories). Connected sources...

CVE-2026-55023

CVE-2026-55023 is a Microsoft Office information-disclosure vulnerability described as an out-of-bounds read that could allow a local attacker to disclose information. CVSS v3.1 base score 5.5 (MEDIUM): attack vector LOCAL, attack complexity LOW, privileges required NONE, user interaction REQUIRE...

CVE-2026-55021

CVE-2026-55021 affects Microsoft SharePoint Server (Office/SharePoint component). The issue is caused by improper neutralization of input during web page generation, enabling an authorized attacker to spoof over the network via a malicious link or page. The CVSSv3.1 score is 7.3 (High) with Netwo...

CVE-2026-55020

CVE-2026-55020 is an Office SharePoint cross-site scripting vulnerability described as improper neutralization of input during web page generation, enabling an authenticated attacker to spoof over the network. The affected component is Microsoft Office SharePoint; root cause is input handling in ...

CVE-2026-55046

CVE-2026-55046 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally. The CVE is documented in multiple feeds (NVD, MSRC, CIRCL sightings) with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with use...

CVE-2026-55018

CVE-2026-55018 is a use-after-free in Microsoft Office that enables local code execution. The vulnerability is listed among Microsoft Office family issues and is part of July 2026 updates; exploitation requires the user to open a malicious Office file or link (SharePoint variants may not require ...

CVE-2026-55019

CVE-2026-55019 describes an "Improper neutralization of input during web page generation" (XSS) in Microsoft Office SharePoint, enabling an authorized attacker to spoof content over the network. Multiple connected sources confirm: affected product is SharePoint Server (Microsoft Office/SharePoint...

CVE-2026-55024

CVE-2026-55024 – Microsoft Excel remote code execution . The vulnerability is described as an access of resource using incompatible type (type confusion) in Microsoft Office Excel, enabling an unauthorized attacker to execute code locally. Connected advisories (NCSC, ZDI, ENISA ENISA-style) indic...

CVE-2026-50408

CVE-2026-50408 is an information-disclosure vulnerability in Microsoft Office Excel caused by an out-of-bounds read that can disclose information locally to an attacker. The NVD/NCSC entries corroborate Excel as the affected product; Microsoft’s MSRC entry labels it as a Excel information-disclos...

CVE-2026-55017

Mode C: CVE-2026-55017 is a heap-based buffer overflow affecting Microsoft Office, enabling a local attacker to execute code. The available connected documents confirm this vulnerability within Microsoft Office products (Office components cited in the NCSC advisory and multiple CVE trackers). Roo...

CVE-2026-55016

CVE-2026-55016 is a SharePoint-related issue affecting Microsoft Office SharePoint, described as improper neutralization of input during web page generation (XSS) that enables spoofing over a network by an authorized attacker. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) yields a bas...

CVE-2026-50314

CVE-2026-50314 is a Microsoft Office use-after-free vulnerability that enables a local attacker to execute arbitrary code by convincing a user to open a malicious document or link (Office components implicated include Word/Excel/PowerPoint/SharePoint per provided sources). The issue is described ...

CVE-2026-50467

CVE-2026-50467 is a use-after-free vulnerability in Microsoft Office that can allow an attacker to execute code locally. The linked sources (Microsoft and third-party advisories) confirm Office as the affected product and describe the underlying issue as a use-after-free leading to arbitrary code...

CVE-2026-48580

CVE-2026-48580 affects Microsoft Office Excel. The vulnerability is an untrusted pointer dereference in Excel that can allow an attacker to disclose information locally. Based on linked sources, this is a local vulnerability with medium severity (CVSS 3.1: 5.5) and requires user interaction; expl...

CVE-2026-50301

CVE-2026-50301 is a heap-based buffer overflow in Microsoft Office that allows local code execution. The provided documents confirm the affected product (Microsoft Office) and the impact (remote/local execution via heap overflow) but do not include detailed exploit steps or patch/fix information ...

CVE-2026-47642

CVE-2026-47642 is a Microsoft Office Excel vulnerability described as a use-after-free in Excel that enables a local attacker to execute code. The connected sources confirm the issue affects Microsoft Excel and is capable of arbitrary-code execution, with a CVSSv3.1 base score of 7.8 (HIGH). Atta...

CVE-2026-47290

CVE-2026-47290 is a Microsoft Office remote-code-execution vulnerability described as a use-after-free in Office components. Affected software includes Microsoft Office family (Word, Excel, PowerPoint, SharePoint) with the Office ecosystem cited in NCsc advisories and CIRCL sighting logs. The CVS...

CVE-2026-55010

CVE-2026-55010 is a heap-based buffer overflow in the Minecraft Bedrock Dedicated Server that could allow an unauthorized attacker to execute code over a network. A CIRCL sighting indicates exploitation in the wild; the provided documents do not specify a patch or version to remediate.

CVE-2026-54126

CVE-2026-54126 is a Windows RDP information-disclosure vulnerability (out-of-bounds read). It is triggered over the network and requires user interaction, with no privileges required by the attacker; impact is disclosure of confidential information. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C...

CVE-2026-54128

CVE-2026-54128 is a Windows DHCP Client use-after-free vulnerability that could allow an unauthenticated local attacker to execute code. The issue, described in the NVD entry and echoed by TALOS, affects the Windows DHCP Client component and is known to have been exploited in the wild (per CIRCL ...

CVE-2026-50690

CVE-2026-50690 is a Windows SMB information-disclosure vulnerability described as caused by the use of an uninitialized resource within Windows SMB that can allow an authorized local attacker to disclose information. The CVE is linked to Microsoft advisories and MSRC updates addressing the issue,...

CVE-2026-50692

CVE-2026-50692 is a Windows vulnerability in Desktop Window Manager (DWM): a heap-based buffer overflow that enables local privilege escalation by an authorized, low-privilege user with no user interaction. Public sources confirm the issue and Microsoft has released updates to address it; affecte...

CVE-2026-54125

CVE-2026-54125 affects Windows Runtime and describes a race-condition vulnerability in concurrent execution on a shared resource that enables local privilege elevation for an authenticated attacker. The CVE is rated with CVSSv3.1 base metrics: AV Local, AC Low, PR Low, UI None, S unchanged, C/H/I...

CVE-2026-50689

CVE-2026-50689 – Windows Clipboard Server suffers a use-after-free in the Clipboard Server that enables a local, authorized attacker to elevate privileges. The CVSS 3.1 vector shows a local, low-privilege exploit with no user interaction and high confidentiality, integrity, and availability impac...

CVE-2026-50687

CVE-2026-50687 is a Windows Win32k local privilege-escalation vulnerability caused by a use-after-free in the Windows Kernel. It affects the Win32k subsystem and enables an authenticated attacker to elevate privileges locally (base CVSS v3.1 score 8.8, vector: LOCAL, LOW complexity, LOW privilege...

CVE-2026-50686

CVE-2026-50686 is a Windows OLE remote code execution vulnerability caused by a type confusion in resource access. It enables network-exposed code execution without authentication and is documented with CVSS v3.1 base score 8.1 (High). Public references identify the affected area as Windows OLE, ...

CVE-2026-50683

CVE-2026-50683 is a Windows DHCP Client/Server heap-based buffer overflow that enables an authenticated attacker on an adjacent network to elevate privileges. Public details in the initial entry cite a heap-based overflow and adjacent-access attack path with high impact (C:H, I:H, A:H) and a CVSS...

CVE-2026-50685

CVE-2026-50685 is a Windows DHCP Server Remote Code Execution vulnerability caused by a double-free in the DHCP Server component. It is network-exploitable (no user interaction) and rated by Microsoft as an in-scope issue with high impact (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; CVSS v3.1 base 7.5)....

CVE-2026-50682

CVE-2026-50682 describes an out-of-bounds read in Windows Active Directory (Active Directory Domain Services) that can allow an authorized attacker to cause a denial of service over the network. The description and cross-references in the connected documents confirm the affected component as Wind...

CVE-2026-54121

CVE-2026-54121 affects Active Directory Certificate Services (AD CS). Root cause: improper authorization allowing an authorized attacker to elevate privileges over the network. Impact: elevation of privilege with high CVSS (8.8) per Microsoft-assigned metrics. Remediation: Microsoft has released ...

CVE-2026-50681

CVE-2026-50681 is a Windows Secure Channel information disclosure vulnerability in Windows Cryptographic Services. The available documents describe exposure of sensitive information to an unauthorized actor, allowing a locally authenticated attacker to disclose data. Connected sources confirm the...

CVE-2026-50680

CVE-2026-50680 is a heap-based buffer overflow in Windows Hyper-V that enables local privilege escalation by an authorized attacker. The issue affects Hyper-V and is exploitable locally with high privileges required and no user interaction, per the CVE description and details in connected documen...

CVE-2026-50688

CVE-2026-50688 is a Windows Win32k elevation-of-privilege vulnerability described as a use-after-free in the Win32k subsystem that allows a locally authenticated attacker to gain higher privileges. The connected documents confirm the CVE title and its Windows kernel context, with advisories and C...

CVE-2026-50679

CVE-2026-50679 is a Windows-focused elevation-of-privileges vulnerability in the Windows Search Component. The core issue is a heap-based buffer overflow that can be triggered by an authenticated local attacker to gain higher privileges on the system. Public descriptions consistently name the aff...

CVE-2026-50684

CVE-2026-50684 (AD FS spoofing) : The vulnerability is described as improper neutralization of input during web page generation (XSS) in Active Directory Federation Services, enabling an authorized attacker to perform spoofing over the network. The CVSS v3.1 base metrics indicate a Medium severit...

CVE-2026-50677

CVE-2026-50677 is a Windows Media use-after-free vulnerability that enables an authorized, local attacker to elevate privileges. Affected: Windows Media components; root cause: use-after-free in the Windows Media stack. Impact: local privilege escalation (CVSS 3.1/3.1 7.8 HIGH). Mitigation: apply...