CVE-2026-45456

CVE-2026-45456 affects Microsoft Office apps (notably Outlook and Word) and is caused by a resource access type confusion that can lead to local code execution. The vulnerability allows an authenticated, local attacker to run arbitrary code without user interaction, with high impact on confidenti...

CVE-2026-45458

Microsoft Office (including Outlook and Word) is affected by CVE-2026-45458 due to a type-confusion in resource access, enabling local code execution. The vulnerability arises when an incompatible type is accessed, with a local attack vector, no user interaction, and no privileges required. The C...

CVE-2026-45463

CVE-2026-45463 describes a heap-based buffer overflow in Microsoft Office that allows an attacker with local access to execute code on the affected system. The sources identify Microsoft Office and classify the flaw as a heap-based overflow with high impact (CVSSv3.1: 8.4, LOCAL access, no user i...

CVE-2026-55133

CVE-2026-55133 affects Microsoft Office OneNote. The issue is a heap-based buffer overflow in OneNote that can allow a local attacker to execute code on the affected system. CVSSv3.1 indicates ATT&CK: local access, user interaction required, with high impact to confidentiality, integrity, and ava...

CVE-2026-44819

CVE-2026-44819 affects Microsoft Office and is described as a heap-based buffer overflow that allows a local attacker to execute code. The vulnerability is characterized by a LOCAL attack vector, LOW attack complexity, and requires user interaction, with a high impact on confidentiality, integrit...

CVE-2026-63515

CVE-2026-63515 concerns an out-of-bounds read in Microsoft Office that enables local code execution when exploited by an attacker who must have some user interaction. The affected product is Microsoft Office; the root cause is an out-of-bounds read in the code path used during document handling. ...

CVE-2026-44817

CVE-2026-44817 is an Excel vulnerability: an integer underflow (wrap/wraparound) in Microsoft Excel could allow a local attacker to execute code. Exploitation details in the public metrics show local access with user interaction required and high impact on confidentiality, integrity, and availabi...

CVE-2026-44818

CVE-2026-44818 affects Microsoft Excel. A integer underflow (wrap/wraparound) in Excel is described as allowing an unauthorized attacker to execute code locally. The associated CVSS 3.1 vector indicates Local attack vector, high impact on confidentiality, integrity, and availability, with High pr...

CVE-2026-55134

CVE-2026-55134 is a stack-based buffer overflow in Microsoft Word (Office) that can allow a local attacker to execute arbitrary code. The CVE entry is corroborated by multiple sources in the Connected documents, which identify Word as the affected component and describe local code execution as th...

CVE-2026-55035

CVE-2026-55035 is an information-disclosure vulnerability described as an out-of-bounds read in Microsoft Office that allows a locally authenticated attacker to disclose information. Connected sources confirm this affects multiple Office components (Word, Excel, PowerPoint, SharePoint, etc.) and ...

CVE-2026-45474

The documents confirm CVE-2026-45474 is a Microsoft Office vulnerability described as a heap-based buffer overflow that allows an unauthenticated/unauthorized attacker to execute code locally on affected systems. Affected product is Microsoft Office, with the root cause identified as a heap-based...

CVE-2026-45455

CVE-2026-45455 is an Excel information-disclosure vulnerability (out-of-bounds read) in Microsoft Office Excel. The issue allows an unauthorized attacker to disclose information over a network. Multiple connected documents confirm the affected component as Microsoft Excel (Office) and attribute t...

CVE-2026-68799

CVE-2026-68799 : A vulnerability in Microsoft Excel arises from the use of an uninitialized resource, enabling a local attacker to disclose information. Affected product is Microsoft Excel; the issue is a local, low-exploitation vector with user interaction required and a reported CVSSv3.1 base s...

CVE-2026-45469

CVE-2026-45469 affects Microsoft Excel (Office) and is caused by an integer underflow/wraparound in Excel. The vulnerability can allow a local attacker to execute code on the affected system; the CVSS indicates LOCAL access, required user interaction, and high impact to confidentiality, integrity...

CVE-2026-68804

CVE-2026-68804 : A numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability is documented across multiple sources (NVD, CVE listings) with the impact described as local code execution and a high base score (CVSS 3.1: AV=L, AC=L,...

CVE-2026-68802

CVE-2026-68802 describes an out-of-bounds read flaw in Microsoft Office Excel that can allow a local attacker to disclose information. The vulnerability affects Excel and is triggered locally, requiring user interaction per the CVSS:3.1 metrics (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). The root caus...

CVE-2026-50408

CVE-2026-50408 is an information-disclosure vulnerability in Microsoft Office Excel caused by an out-of-bounds read that can disclose information locally to an attacker. The NVD/NCSC entries corroborate Excel as the affected product; Microsoft’s MSRC entry labels it as a Excel information-disclos...

CVE-2026-55022

CVE-2026-55022 is a type-confusion vulnerability in Microsoft Office that could allow local code execution when a user opens a specially crafted file or clicks a malicious link in Office applications (Word/Excel/PowerPoint/SharePoint are affected as listed by public advisories). Connected sources...

CVE-2026-64898

CVE-2026-64898 describes a heap-based buffer overflow in Microsoft Office that enables a local code execution under an attack vector of local access with user interaction required. The CVSS 3.1 metrics indicate high severity (base score 7.8), with impact to confidentiality, integrity, and availab...

CVE-2026-50387

CVE-2026-50387 — Windows GDI Elevation of Privilege Affects: Windows GDI subsystem. The vulnerability is a stack-based buffer overflow in GDI that can be triggered by an authorized attacker to achieve local privilege escalation. Impact: Local elevation of privileges with a CVSS v3.1 base score of...

CVE-2026-45485

CVE-2026-45485: In Microsoft Office, an out-of-bounds read leads to local information disclosure. Documents confirm the vulnerability and its impact (local disclosure) with low severity (CVSS 3.1:3.3). Exploitation details and affected component/version specifics are not provided in the supplied ...

CVE-2026-68805

CVE-2026-68805 affects Microsoft Excel (part of Microsoft Office) with a heap-based buffer overflow leading to remote code execution. The connected documents consistently describe it as a heap-based overflow in Excel that enables an attacker to run arbitrary code, with a CVSSv3.1 base score of 7....

CVE-2026-45472

CVE-2026-45472 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. The connected sources (NVD, CVE listing) corroborate a local-execution impact due to a heap overflow in Office components. No explicit root-cause details beyond the hea...

CVE-2026-55032

CVE-2026-55032 is a Microsoft Word remote code execution vulnerability reported as a use-after-free issue in Microsoft Office Word. The CVE entry specifies local attack vector with user interaction required, yielding a high severity (CVSS 3.1: 7.8, HIGH) and potential for arbitrary code execution...

CVE-2026-48580

CVE-2026-48580 affects Microsoft Office Excel. The vulnerability is an untrusted pointer dereference in Excel that can allow an attacker to disclose information locally. Based on linked sources, this is a local vulnerability with medium severity (CVSS 3.1: 5.5) and requires user interaction; expl...

CVE-2026-55121

CVE-2026-55121 corresponds to an out-of-bounds read in Microsoft Office that enables an unauthenticated or authorized local attacker to disclose information. The public descriptions across NVD/MSRC and EUVD notes indicate the vulnerability affects Microsoft Office components and results in local ...

CVE-2026-68796

CVE-2026-68796 describes a heap-based buffer overflow in Microsoft Excel that can lead to local code execution. Impact per CVSS: HIGH, with local attack vector, required user interaction, and high confidentiality/integrity/availability impact. Affected product is Microsoft Excel; root cause is a ...

CVE-2026-55140

CVE-2026-55140 is a Microsoft Office remote code execution vulnerability caused by a heap-based buffer overflow in Office components. An unauthorized attacker could exploit this locally to run arbitrary code on a vulnerable system, as described in multiple security sources. Connected documents co...

CVE-2026-56192

The CVE-2026-56192 entry describes a local, information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read. Affected product: Microsoft Office suite (Office components) per multiple connected sources. Root cause and exact vulnerable component are not fully detailed in th...

CVE-2026-63518

CVE-2026-63518 describes a heap-based buffer overflow in Microsoft Office Word that allows an unauthenticated attacker to execute code locally. Affected software: Microsoft Word (Office). Root cause: heap-based overflow in Word’s handling of inputs. Impact: local code execution with high severity...

CVE-2026-63528

CVE-2026-63528 describes an out-of-bounds read in Microsoft Office Word that allows a local attacker to disclose information. The vulnerability affects Word and is exploitable locally with user interaction required; the underlying cause is an out-of-bounds read. The CVSS v3.1 vector indicates low...

CVE-2026-44820

CVE-2026-44820 affects Microsoft Excel in Office. An integer underflow (wrap/wraparound) in Excel can allow a local attacker to execute code on the affected host. Exploitation requires local access and user interaction; no remote vector is indicated. The CVSS 3.1 base score is 7.8 (HIGH) with imp...

CVE-2026-44823

The CVE-2026-44823 entry concerns an integer underflow (wrap or wraparound) in Microsoft Office Excel that could allow an attacker to execute code locally. Affected product: Microsoft Excel within Microsoft Office. The vulnerability is described as enabling local code execution with attack vector...

CVE-2026-45645

The provided data identify CVE-2026-45645 as a heap-based buffer overflow affecting Microsoft Office, enabling local code execution. Details show an exploit would require user interaction and has a local attack surface (attackVector: LOCAL, userInteraction: REQUIRED) with high impacts on confiden...

CVE-2026-50314

CVE-2026-50314 is a Microsoft Office use-after-free vulnerability that enables a local attacker to execute arbitrary code by convincing a user to open a malicious document or link (Office components implicated include Word/Excel/PowerPoint/SharePoint per provided sources). The issue is described ...

CVE-2026-65807

Microsoft Excel is affected by CVE-2026-65807 due to a type confusion in resource access, allowing remote code execution over a network. The vulnerability arises from incompatible type handling in a resource access path within Excel, impacting users of Microsoft Office Excel. The CVSS 3.1 base sc...

CVE-2026-68795

Microsoft Excel (Office) is affected by a stack-based buffer overflow (CVE-2026-68795) that could allow an attacker to execute code locally. The CVSS v3.1 score is 7.8 (HIGH) with LOCAL attack vector, requiring user interaction. The available documents do not specify a patched version or workarou...

CVE-2026-68816

CVE-2026-68816 is a stack-based buffer overflow in Microsoft Excel that enables local code execution by an unauthenticated attacker. The affected product is Microsoft Office Excel; the root cause is a stack-based overflow in Excel’s handling that can be triggered locally. The CVSS 3.1 base score ...

CVE-2026-70310

Summary: CVE-2026-70310 is an information-disclosure vulnerability in Microsoft Word caused by an out-of-bounds read. The issue allows a local, unauthenticated user to disclose information on affected systems, with exploitation requiring user interaction and a local access context (per CVSS: LOCA...

CVE-2026-45461

CVE-2026-45461 describes a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. Documents confirm the vulnerability exists in Microsoft Office and indicate a local attack vector with high impact (C: HIGH, I: HIGH, A: HIGH) and a base score o...

CVE-2026-45471

CVE-2026-45471 affects Microsoft Word and stems from an untrusted pointer dereference in Word’s runtime that can lead to local code execution. The CVSSv3.1 vector (L/Low complexity, no privileges required, user interaction required, local scope) yields a base score of 7.8 (HIGH). Documented impac...

CVE-2026-50665

CVE-2026-50665 is described as an information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read, enabling a local attacker to disclose data. Public sources in the connected set reiterate the issue as a Microsoft Office vulnerability with potential to access sensitive in...

CVE-2026-68794

CVE-2026-68794 is a heap-based buffer overflow in Microsoft Office Excel that can allow an attacker to execute code locally on affected systems. Available documents confirm the vulnerability affects Excel, with a heap-based overflow as the underlying issue; however, no specific affected versions,...

CVE-2026-70320

CVE-2026-70320 concerns an issue in Microsoft Office PowerPoint where improper input validation can allow an unauthorized local attacker to disclose information. The affected product is PowerPoint (part of Microsoft Office), and the underlying cause is improper input validation leading to informa...

CVE-2026-63513

CVE-2026-63513 affects Microsoft Office (Graphics Component) via a heap-based buffer overflow that enables local code execution. The CVE is described as a Heap-based buffer overflow in Microsoft Office allowing an unauthorized attacker to execute code locally. CVSS 3.1 indicates LOCAL attack vect...

CVE-2026-66807

CVE-2026-66807 is a Microsoft Office Graphics Component vulnerability described as a stack-based buffer overflow. Affected product is Microsoft Office/Graphics Component; impact centers on code execution with a CVSSv3.1 base score of 7.8 (HIGH). Exploitation vector/conflict exists between sources...

CVE-2026-68810

CVE-2026-68810 describes a vulnerability in Microsoft Office Excel where an untrusted pointer dereference could allow a local attacker to execute code. Documents consistently cite a local exploit path with high impact (confidentiality, integrity, and availability all rated High) and a user intera...

CVE-2026-44824

CVE-2026-44824 affects Microsoft Office and is a heap-based buffer overflow that enables local code execution. The issue requires user interaction and has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, no privileges required, and high impact on confidentiality, integrity, and avai...

CVE-2026-45459

The CVE-2026-45459 entry concerns Microsoft Excel. A protection-mechanism failure in Excel is described as allowing a local attacker to bypass a security feature. According to the available data, the vulnerability has a low base score (CVSS 3.1: 3.3), with LOCAL attack vector, LOW attack complexi...

CVE-2026-55127

CVE-2026-55127 is a heap-based buffer overflow in Microsoft Word (Office) that enables local code execution. Public sources corroborate a Word-related RCE risk, with the issue categorized under Office/Word vulnerabilities in July 2026 patch disclosures. Remediation is via Microsoft’s July 2026 se...