CVE-2026-55032

CVE-2026-55032 is a Microsoft Word remote code execution vulnerability reported as a use-after-free issue in Microsoft Office Word. The CVE entry specifies local attack vector with user interaction required, yielding a high severity (CVSS 3.1: 7.8, HIGH) and potential for arbitrary code execution...

CVE-2026-64899

CVE-2026-64899 concerns a local vulnerability in Microsoft Office causing an out-of-bounds read that enables an unauthenticated or authorized attacker to disclose information locally. The connected documents confirm the affected product family (Microsoft Office) and the impact (information disclo...

CVE-2026-45485

CVE-2026-45485: In Microsoft Office, an out-of-bounds read leads to local information disclosure. Documents confirm the vulnerability and its impact (local disclosure) with low severity (CVSS 3.1:3.3). Exploitation details and affected component/version specifics are not provided in the supplied ...

CVE-2026-68801

CVE-2026-68801 describes a heap-based buffer overflow in Microsoft Excel that could allow an attacker to execute arbitrary code locally. The vulnerability arises from a heap overflow condition within Excel’s handling of certain input, leading to potential code execution with the user’s privileges...

CVE-2026-68808

CVE-2026-68808 affects Microsoft Excel (Office) with an out-of-bounds read that allows a local attacker to disclose information. Root cause: out-of-bounds read in Excel. Impact: local information disclosure; CVSSv3.1 metrics indicate Local access, no privileges, user interaction required, Confide...

CVE-2026-55041

CVE-2026-55041 is a heap-based buffer overflow in Microsoft Office Excel that can allow a local attacker to execute arbitrary code. The issue affects Excel (and is reflected in the overall Office ecosystem advisories) and arises from a heap overflow in a component used by Excel. The CVSS v3.1 vec...

CVE-2026-55121

CVE-2026-55121 corresponds to an out-of-bounds read in Microsoft Office that enables an unauthenticated or authorized local attacker to disclose information. The public descriptions across NVD/MSRC and EUVD notes indicate the vulnerability affects Microsoft Office components and results in local ...

CVE-2026-45469

CVE-2026-45469 affects Microsoft Excel (Office) and is caused by an integer underflow/wraparound in Excel. The vulnerability can allow a local attacker to execute code on the affected system; the CVSS indicates LOCAL access, required user interaction, and high impact to confidentiality, integrity...

CVE-2026-70313

CVE-2026-70313 affects Microsoft Office PowerPoint and is described as an improper input validation issue that can lead to local information disclosure. CVSS 3.1 vector (LOCAL, LOW attack complexity, NONE privileges, USER interaction required) yields a base score of 7.8 (HIGH). The provided docum...

CVE-2026-70318

CVE-2026-70318 affects Microsoft Office Excel via improper input validation, enabling local information disclosure without admin privileges. Affected component: Excel; root cause: input validation flaw; impact: potential leakage of sensitive data. CVSSv3.1: 5.5 (Medium) with LOCAL attacker, user ...

CVE-2026-50314

CVE-2026-50314 is a Microsoft Office use-after-free vulnerability that enables a local attacker to execute arbitrary code by convincing a user to open a malicious document or link (Office components implicated include Word/Excel/PowerPoint/SharePoint per provided sources). The issue is described ...

CVE-2026-55045

CVE-2026-55045 is an Office remote code execution vulnerability described as an out-of-bounds read in Microsoft Office that could enable a local attacker to execute code. Connected sources tie this CVE to Microsoft Office components (Word/PowerPoint/SharePoint) with local-exploit prerequisites an...

CVE-2026-66807

CVE-2026-66807 is a Microsoft Office Graphics Component vulnerability described as a stack-based buffer overflow. Affected product is Microsoft Office/Graphics Component; impact centers on code execution with a CVSSv3.1 base score of 7.8 (HIGH). Exploitation vector/conflict exists between sources...

CVE-2026-68815

CVE-2026-68815 (Microsoft Excel) involves a heap-based buffer overflow in Excel that allows local code execution by an unauthorized attacker; the exploitation requires user interaction and has a high impact on confidentiality, integrity, and availability. Product: Microsoft Office Excel (Windows)...

CVE-2026-70314

CVE-2026-70314 : Affects Microsoft Office. The issue arises from improper input validation, enabling a local attacker to disclose information. The CVSS v3.1 base metrics indicate a Medium severity (5.5) with Local attack vector, requiring user interaction, and no impact on integrity or availabili...

CVE-2026-63531

CVE-2026-63531 is a Microsoft Office Word vulnerability described as an out-of-bounds read that allows a local, unauthenticated attacker to disclose information. The CVSS v3.1 base score is 5.5 (Medium), with attack vector Local, required user interaction, low attack complexity, and a High impact...

CVE-2026-68800

CVE-2026-68800 is a heap-based overflow in Microsoft Office Excel that could allow a local attacker to execute code with the user’s privileges after exploiting via a crafted file opened or processed by Excel. Affected software is Microsoft Excel (Office). The advisory notes a local attack vector ...

CVE-2026-68806

Microsoft Excel contains an out-of-bounds write vulnerability (CVE-2026-68806) that can allow an authenticated local attacker to execute code on the affected system. The CVE description specifies local code execution via an out-of-bounds write in Excel. The connected records confirm the issue is ...

CVE-2026-50408

CVE-2026-50408 is an information-disclosure vulnerability in Microsoft Office Excel caused by an out-of-bounds read that can disclose information locally to an attacker. The NVD/NCSC entries corroborate Excel as the affected product; Microsoft’s MSRC entry labels it as a Excel information-disclos...

CVE-2026-55037

CVE-2026-55037 affects Microsoft Office Excel. A heap-based buffer overflow in Excel allows an unauthenticated/unauthorized attacker to execute arbitrary code locally. The CVSSv3.1 vector indicates a local attack with low attack complexity, no privileges required, but user interaction is required...

CVE-2026-55128

CVE-2026-55128 is a Use-after-free in Microsoft Word that enables local code execution by an unauthenticated attacker who powers the exploit via a crafted file/link. Affected product scope is Microsoft Word/Office as per Microsoft advisories; document does not specify exact vulnerable builds or p...

CVE-2026-63532

CVE-2026-63532 affects Microsoft Office and is caused by an integer overflow/wraparound in a component of Office, enabling local code execution by an unauthenticated user with at least user interaction. The available sources describe the vulnerability class and impact but do not provide specific ...

CVE-2026-55038

CVE-2026-55038 is a stack-based buffer overflow in Microsoft Word (Office) that can allow local code execution. The vulnerability affects Word and is exploitable by a crafted file opened by a user with no privileges required, though user interaction is needed (per CVSS: LOCAL, UI: REQUIRED, Privi...

CVE-2026-48580

CVE-2026-48580 affects Microsoft Office Excel. The vulnerability is an untrusted pointer dereference in Excel that can allow an attacker to disclose information locally. Based on linked sources, this is a local vulnerability with medium severity (CVSS 3.1: 5.5) and requires user interaction; expl...

CVE-2026-65664

This CVE describes a heap-based buffer overflow in Microsoft Office that allows a local attacker to execute code. The available documents mention the vulnerability as a local code execution issue, but do not provide detailed affected versions, root cause analysis beyond the heap overflow, or reme...

CVE-2026-45459

The CVE-2026-45459 entry concerns Microsoft Excel. A protection-mechanism failure in Excel is described as allowing a local attacker to bypass a security feature. According to the available data, the vulnerability has a low base score (CVSS 3.1: 3.3), with LOCAL attack vector, LOW attack complexi...

CVE-2026-50665

CVE-2026-50665 is described as an information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read, enabling a local attacker to disclose data. Public sources in the connected set reiterate the issue as a Microsoft Office vulnerability with potential to access sensitive in...

CVE-2026-55022

CVE-2026-55022 is a type-confusion vulnerability in Microsoft Office that could allow local code execution when a user opens a specially crafted file or clicks a malicious link in Office applications (Word/Excel/PowerPoint/SharePoint are affected as listed by public advisories). Connected sources...

CVE-2026-62842

CVE-2026-62842 is an out-of-bounds read in the Microsoft Office Graphics Component that allows a local attacker to disclose information. Exploitation is local with user interaction required; no privileges required and the impact is a confidentiality loss (C:H, I:N, A:N). The CVSSv3.1 base score i...

CVE-2026-55127

CVE-2026-55127 is a heap-based buffer overflow in Microsoft Word (Office) that enables local code execution. Public sources corroborate a Word-related RCE risk, with the issue categorized under Office/Word vulnerabilities in July 2026 patch disclosures. Remediation is via Microsoft’s July 2026 se...

CVE-2026-55140

CVE-2026-55140 is a Microsoft Office remote code execution vulnerability caused by a heap-based buffer overflow in Office components. An unauthorized attacker could exploit this locally to run arbitrary code on a vulnerable system, as described in multiple security sources. Connected documents co...

CVE-2026-66810

This CVE concerns Microsoft Office Word, where a heap-based buffer overflow in Word could allow a local attacker to disclose information. The vulnerability is described consistently across sources as a local, heap-based overflow affecting Word, enabling information disclosure. The provided docume...

CVE-2026-44823

The CVE-2026-44823 entry concerns an integer underflow (wrap or wraparound) in Microsoft Office Excel that could allow an attacker to execute code locally. Affected product: Microsoft Excel within Microsoft Office. The vulnerability is described as enabling local code execution with attack vector...

CVE-2026-44824

CVE-2026-44824 affects Microsoft Office and is a heap-based buffer overflow that enables local code execution. The issue requires user interaction and has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, no privileges required, and high impact on confidentiality, integrity, and avai...

CVE-2026-45472

CVE-2026-45472 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. The connected sources (NVD, CVE listing) corroborate a local-execution impact due to a heap overflow in Office components. No explicit root-cause details beyond the hea...

CVE-2026-55044

CVE-2026-55044: Out-of-bounds read in Microsoft Office Excel; vulnerability allows a local attacker to execute code. Affected product: Microsoft Office Excel. Root cause: out-of-bounds read (details not expanded in the provided docs). Impact: remote code execution on the local host with high seve...

CVE-2026-64903

CVE-2026-64903 : Affected product is Microsoft Office. The vulnerability is an integer overflow/wraparound in Office components that allows an unauthorized attacker to execute code locally on a vulnerable host (attack vector: LOCAL; user interaction required; impact: confidentiality, integrity, a...

CVE-2026-66809

The CVE-2026-66809 entry refers to an out-of-bounds read vulnerability in Microsoft Office, specifically affecting the Office Graphics Component. The vulnerability allows a local attacker to disclose information, with no privileges required, but user interaction required. CVSS v3.1 metrics indica...

CVE-2026-68798

CVE-2026-68798 is a heap-based buffer overflow in Microsoft Office Excel. The vulnerability allows an unauthorized attacker to execute code locally on a user’s machine, with local attack vector and user interaction required. The CVSS 3.1 score is 7.8 (High), with impact on confidentiality, integr...

CVE-2026-68813

Technical details about CVE-2026-68813 are not publicly provided in the supplied connected documents. Monitor for updates from official sources to obtain affected product/version, root cause, impact, and remediation information.

CVE-2026-70312

The CVE affects Microsoft Office PowerPoint and stems from improper input validation, enabling a local attacker to disclose information. The payload would require local access and user interaction, with no privileges required beyond the attacker’s access context. Impact is limited to information ...

CVE-2026-70322

CVE-2026-70322 affects Microsoft Office PowerPoint. Cause: improper input validation in PowerPoint leading to local information disclosure when exploited by a local user with no privileges required. CVSS 3.1 base score 5.5 (MEDIUM); attack vector LOCAL, user interaction REQUIRED, confidentiality ...

CVE-2026-44820

CVE-2026-44820 affects Microsoft Excel in Office. An integer underflow (wrap/wraparound) in Excel can allow a local attacker to execute code on the affected host. Exploitation requires local access and user interaction; no remote vector is indicated. The CVSS 3.1 base score is 7.8 (HIGH) with imp...

CVE-2026-45471

CVE-2026-45471 affects Microsoft Word and stems from an untrusted pointer dereference in Word’s runtime that can lead to local code execution. The CVSSv3.1 vector (L/Low complexity, no privileges required, user interaction required, local scope) yields a base score of 7.8 (HIGH). Documented impac...

CVE-2026-55025

CVE-2026-55025 affects Microsoft Office Excel. Root cause: a type confusion in Excel handling resources that allows an unauthenticated attacker to run arbitrary code locally. The vulnerability is classified as high impact (CVSSv3.1: 7.8, High) with local attack vector, no privileges required, but...

CVE-2026-55141

CVE-2026-55141 is a Microsoft Office Excel vulnerability described as a stack-based buffer overflow that allows a local attacker to execute code on the affected system. The CVE entry identifies Excel as the affected product and lists a high impact with a CVSS3.1 score of 7.8 (Local, High confiden...

CVE-2026-70323

CVE-2026-70323 – Microsoft Office contains an improper input validation flaw that can allow an unauthorized attacker to locally disclose information. The CVSS v3.1 metrics indicate a Medium base score (5.5) with a Local attack vector, requiring user interaction, and no impact to availability or i...

CVE-2026-45461

CVE-2026-45461 describes a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. Documents confirm the vulnerability exists in Microsoft Office and indicate a local attack vector with high impact (C: HIGH, I: HIGH, A: HIGH) and a base score o...

CVE-2026-45486

CVE-2026-45486 concerns an untrusted pointer dereference in Microsoft Word that can allow a local attacker to execute code. The CVSS metrics indicate a HIGH base score (7.8) with LOCAL attack vector, LOW attack complexity, and user interaction required, privileges NONE, reflecting a local impact ...

CVE-2026-45645

The provided data identify CVE-2026-45645 as a heap-based buffer overflow affecting Microsoft Office, enabling local code execution. Details show an exploit would require user interaction and has a local attack surface (attackVector: LOCAL, userInteraction: REQUIRED) with high impacts on confiden...