CVE-2026-78518

CVE-2026-78518 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, no privileges required, but user interaction requi...

CVE-2026-68808

CVE-2026-68808 affects Microsoft Excel (Office) with an out-of-bounds read that allows a local attacker to disclose information. Root cause: out-of-bounds read in Excel. Impact: local information disclosure; CVSSv3.1 metrics indicate Local access, no privileges, user interaction required, Confide...

CVE-2026-45474

The documents confirm CVE-2026-45474 is a Microsoft Office vulnerability described as a heap-based buffer overflow that allows an unauthenticated/unauthorized attacker to execute code locally on affected systems. Affected product is Microsoft Office, with the root cause identified as a heap-based...

CVE-2026-81949

CVE-2026-81949 is a local code execution vulnerability in Microsoft Office Excel caused by an integer overflow or wraparound in Excel. An unauthorized attacker who convinces a user to open a crafted file can execute arbitrary code on the target system. The CVSS v3.1 score is 7.8 (HIGH) , reflecti...

CVE-2026-47642

CVE-2026-47642 is a Microsoft Office Excel vulnerability described as a use-after-free in Excel that enables a local attacker to execute code. The connected sources confirm the issue affects Microsoft Excel and is capable of arbitrary-code execution, with a CVSSv3.1 base score of 7.8 (HIGH). Atta...

CVE-2026-63517

CVE-2026-63517 describes an out-of-bounds read in the Microsoft Office Graphics Component that allows a local attacker to disclose information. The affected software is Microsoft Office (Graphics Component). Root cause: out-of-bounds read. Impact: confidentiality impact High; attacker needs local...

CVE-2026-81953

Microsoft Office Excel is affected by a stack-based buffer overflow that allows an unauthorized attacker to execute code locally. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, no privileges required, but user interaction required (the victim must open a crafted file...

CVE-2026-45455

CVE-2026-45455 is an Excel information-disclosure vulnerability (out-of-bounds read) in Microsoft Office Excel. The issue allows an unauthorized attacker to disclose information over a network. Multiple connected documents confirm the affected component as Microsoft Excel (Office) and attribute t...

CVE-2026-64899

CVE-2026-64899 concerns a local vulnerability in Microsoft Office causing an out-of-bounds read that enables an unauthenticated or authorized attacker to disclose information locally. The connected documents confirm the affected product family (Microsoft Office) and the impact (information disclo...

CVE-2026-70314

CVE-2026-70314 : Affects Microsoft Office. The issue arises from improper input validation, enabling a local attacker to disclose information. The CVSS v3.1 base metrics indicate a Medium severity (5.5) with Local attack vector, requiring user interaction, and no impact on integrity or availabili...

CVE-2026-70319

CVE-2026-70319 involves Microsoft Office Word with an issue in the handling of input validation. The root cause is reported as improper input validation, leading to an information disclosure vulnerability that can be exploited locally by an unauthenticated attacker who can cause the application t...

CVE-2026-45485

CVE-2026-45485: In Microsoft Office, an out-of-bounds read leads to local information disclosure. Documents confirm the vulnerability and its impact (local disclosure) with low severity (CVSS 3.1:3.3). Exploitation details and affected component/version specifics are not provided in the supplied ...

CVE-2026-68800

CVE-2026-68800 is a heap-based overflow in Microsoft Office Excel that could allow a local attacker to execute code with the user’s privileges after exploiting via a crafted file opened or processed by Excel. Affected software is Microsoft Excel (Office). The advisory notes a local attack vector ...

CVE-2026-85875

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) , with a local attack vector, low complexity, no privileges required, and user interaction required. Impact is limited to confidentiality...

CVE-2026-63531

CVE-2026-63531 is a Microsoft Office Word vulnerability described as an out-of-bounds read that allows a local, unauthenticated attacker to disclose information. The CVSS v3.1 base score is 5.5 (Medium), with attack vector Local, required user interaction, low attack complexity, and a High impact...

CVE-2026-68815

CVE-2026-68815 (Microsoft Excel) involves a heap-based buffer overflow in Excel that allows local code execution by an unauthorized attacker; the exploitation requires user interaction and has a high impact on confidentiality, integrity, and availability. Product: Microsoft Office Excel (Windows)...

CVE-2026-44818

CVE-2026-44818 affects Microsoft Excel. A integer underflow (wrap/wraparound) in Excel is described as allowing an unauthorized attacker to execute code locally. The associated CVSS 3.1 vector indicates Local attack vector, high impact on confidentiality, integrity, and availability, with High pr...

CVE-2026-63532

CVE-2026-63532 affects Microsoft Office and is caused by an integer overflow/wraparound in a component of Office, enabling local code execution by an unauthenticated user with at least user interaction. The available sources describe the vulnerability class and impact but do not provide specific ...

CVE-2026-66807

CVE-2026-66807 is a Microsoft Office Graphics Component vulnerability described as a stack-based buffer overflow. Affected product is Microsoft Office/Graphics Component; impact centers on code execution with a CVSSv3.1 base score of 7.8 (HIGH). Exploitation vector/conflict exists between sources...

CVE-2026-70318

CVE-2026-70318 affects Microsoft Office Excel via improper input validation, enabling local information disclosure without admin privileges. Affected component: Excel; root cause: input validation flaw; impact: potential leakage of sensitive data. CVSSv3.1: 5.5 (Medium) with LOCAL attacker, user ...

CVE-2026-55037

CVE-2026-55037 affects Microsoft Office Excel. A heap-based buffer overflow in Excel allows an unauthenticated/unauthorized attacker to execute arbitrary code locally. The CVSSv3.1 vector indicates a local attack with low attack complexity, no privileges required, but user interaction is required...

CVE-2026-55045

CVE-2026-55045 is an Office remote code execution vulnerability described as an out-of-bounds read in Microsoft Office that could enable a local attacker to execute code. Connected sources tie this CVE to Microsoft Office components (Word/PowerPoint/SharePoint) with local-exploit prerequisites an...

CVE-2026-55121

CVE-2026-55121 corresponds to an out-of-bounds read in Microsoft Office that enables an unauthenticated or authorized local attacker to disclose information. The public descriptions across NVD/MSRC and EUVD notes indicate the vulnerability affects Microsoft Office components and results in local ...

CVE-2026-65664

This CVE describes a heap-based buffer overflow in Microsoft Office that allows a local attacker to execute code. The available documents mention the vulnerability as a local code execution issue, but do not provide detailed affected versions, root cause analysis beyond the heap overflow, or reme...

CVE-2026-55038

CVE-2026-55038 is a stack-based buffer overflow in Microsoft Word (Office) that can allow local code execution. The vulnerability affects Word and is exploitable by a crafted file opened by a user with no privileges required, though user interaction is needed (per CVSS: LOCAL, UI: REQUIRED, Privi...

CVE-2026-55041

CVE-2026-55041 is a heap-based buffer overflow in Microsoft Office Excel that can allow a local attacker to execute arbitrary code. The issue affects Excel (and is reflected in the overall Office ecosystem advisories) and arises from a heap overflow in a component used by Excel. The CVSS v3.1 vec...

CVE-2026-68798

CVE-2026-68798 is a heap-based buffer overflow in Microsoft Office Excel. The vulnerability allows an unauthorized attacker to execute code locally on a user’s machine, with local attack vector and user interaction required. The CVSS 3.1 score is 7.8 (High), with impact on confidentiality, integr...

CVE-2026-81959

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally when a user interacts with a crafted file. The CVSS 3.1 score is 7.8 (HIGH) , with a local attack vector, low complexity, no privileges required, and user interaction required, resulting...

CVE-2026-45469

CVE-2026-45469 affects Microsoft Excel (Office) and is caused by an integer underflow/wraparound in Excel. The vulnerability can allow a local attacker to execute code on the affected system; the CVSS indicates LOCAL access, required user interaction, and high impact to confidentiality, integrity...

CVE-2026-55044

CVE-2026-55044: Out-of-bounds read in Microsoft Office Excel; vulnerability allows a local attacker to execute code. Affected product: Microsoft Office Excel. Root cause: out-of-bounds read (details not expanded in the provided docs). Impact: remote code execution on the local host with high seve...

CVE-2026-62842

CVE-2026-62842 is an out-of-bounds read in the Microsoft Office Graphics Component that allows a local attacker to disclose information. Exploitation is local with user interaction required; no privileges required and the impact is a confidentiality loss (C:H, I:N, A:N). The CVSSv3.1 base score i...

CVE-2026-70323

CVE-2026-70323 – Microsoft Office contains an improper input validation flaw that can allow an unauthorized attacker to locally disclose information. The CVSS v3.1 metrics indicate a Medium base score (5.5) with a Local attack vector, requiring user interaction, and no impact to availability or i...

CVE-2026-81948

Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized local attacker to execute arbitrary code. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges, and results in high impact to confidentiality, integrity, an...

CVE-2026-45461

CVE-2026-45461 describes a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. Documents confirm the vulnerability exists in Microsoft Office and indicate a local attack vector with high impact (C: HIGH, I: HIGH, A: HIGH) and a base score o...

CVE-2026-50314

CVE-2026-50314 is a Microsoft Office use-after-free vulnerability that enables a local attacker to execute arbitrary code by convincing a user to open a malicious document or link (Office components implicated include Word/Excel/PowerPoint/SharePoint per provided sources). The issue is described ...

CVE-2026-55127

CVE-2026-55127 is a heap-based buffer overflow in Microsoft Word (Office) that enables local code execution. Public sources corroborate a Word-related RCE risk, with the issue categorized under Office/Word vulnerabilities in July 2026 patch disclosures. Remediation is via Microsoft’s July 2026 se...

CVE-2026-50408

CVE-2026-50408 is an information-disclosure vulnerability in Microsoft Office Excel caused by an out-of-bounds read that can disclose information locally to an attacker. The NVD/NCSC entries corroborate Excel as the affected product; Microsoft’s MSRC entry labels it as a Excel information-disclos...

CVE-2026-66809

The CVE-2026-66809 entry refers to an out-of-bounds read vulnerability in Microsoft Office, specifically affecting the Office Graphics Component. The vulnerability allows a local attacker to disclose information, with no privileges required, but user interaction required. CVSS v3.1 metrics indica...

CVE-2026-70322

CVE-2026-70322 affects Microsoft Office PowerPoint. Cause: improper input validation in PowerPoint leading to local information disclosure when exploited by a local user with no privileges required. CVSS 3.1 base score 5.5 (MEDIUM); attack vector LOCAL, user interaction REQUIRED, confidentiality ...

CVE-2026-81957

CVE-2026-81957 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized, local attacker to execute code on the system. The attack requires user interaction (e.g., opening a crafted file) but no prior privileges. Microsoft rates the CVSS 3.1 score at 7.8 (HIGH) ...

CVE-2026-50665

CVE-2026-50665 is described as an information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read, enabling a local attacker to disclose data. Public sources in the connected set reiterate the issue as a Microsoft Office vulnerability with potential to access sensitive in...

CVE-2026-55125

CVE-2026-55125 is a Microsoft Office heap-based buffer overflow that enables local code execution. The NVD entry reports a CVSS v3.1 base score of 7.8 (LOCAL, HIGH impact across confidentiality, integrity, and availability) with user interaction required. Connected sources corroborate Office-wide...

CVE-2026-55140

CVE-2026-55140 is a Microsoft Office remote code execution vulnerability caused by a heap-based buffer overflow in Office components. An unauthorized attacker could exploit this locally to run arbitrary code on a vulnerable system, as described in multiple security sources. Connected documents co...

CVE-2026-66810

This CVE concerns Microsoft Office Word, where a heap-based buffer overflow in Word could allow a local attacker to disclose information. The vulnerability is described consistently across sources as a local, heap-based overflow affecting Word, enabling information disclosure. The provided docume...

CVE-2026-68814

CVE-2026-68814 concerns Microsoft Excel (Office) with an out-of-bounds read vulnerability that can allow a local attacker to execute code. The CVSS 3.1 vector (LOCAL, LOW attack complexity, no privileges required, user interaction required) and impact data indicate high confidentiality, integrity...

CVE-2026-81954

CVE-2026-81954 is a use-after-free vulnerability in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The attack requires user interaction and no prior privileges, with a CVSS 3.1 score of 7.8 (HIGH) , reflecting full impact on confidentiality, integrity, and a...

CVE-2026-68813

Technical details about CVE-2026-68813 are not publicly provided in the supplied connected documents. Monitor for updates from official sources to obtain affected product/version, root cause, impact, and remediation information.

CVE-2026-45472

CVE-2026-45472 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. The connected sources (NVD, CVE listing) corroborate a local-execution impact due to a heap overflow in Office components. No explicit root-cause details beyond the hea...

CVE-2026-55022

CVE-2026-55022 is a type-confusion vulnerability in Microsoft Office that could allow local code execution when a user opens a specially crafted file or clicks a malicious link in Office applications (Word/Excel/PowerPoint/SharePoint are affected as listed by public advisories). Connected sources...

CVE-2026-55949

CVE-2026-55949 affects Microsoft Office Excel. The issue is described as a use of an uninitialized resource enabling local code execution. CVSS 3.1 base score 7.8 (HIGH) with local attack vector, low attack complexity, no privileges required but user interaction is required. Exploitation details ...