CVE-2026-44824

CVE-2026-44824 affects Microsoft Office and is a heap-based buffer overflow that enables local code execution. The issue requires user interaction and has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, no privileges required, and high impact on confidentiality, integrity, and avai...

CVE-2026-55132

Microsoft Word/Office vulnerability CVE-2026-55132 involves a double-free in Word that could allow a local attacker to execute arbitrary code. Affected product: Microsoft Word (Office suite). Root cause: memory management flaw (double free) in Word’s handling of certain documents. Impact: local c...

CVE-2026-63527

Microsoft Word is affected by CVE-2026-63527 due to a stack-based buffer overflow in Word documents/processing. The vulnerability allows an unauthorized attacker to execute code locally on a system that processes a crafted document, with local attack vector and user interaction required. The CVSS...

CVE-2026-64909

Microsoft Office is affected by CVE-2026-649909 due to an integer underflow, enabling local code execution. The root cause is a wrap/wraparound flaw in an Office component, with the impact described as local RCE. No specific affected versions or patches are provided in the supplied documents. Exp...

CVE-2026-68817

CVE-2026-68817 describes a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. Affected product is Microsoft Excel; root cause is a stack-based overflow in Excel's handling of input. The CVE entry notes a high-severity impact (base s...

CVE-2026-55127

CVE-2026-55127 is a heap-based buffer overflow in Microsoft Word (Office) that enables local code execution. Public sources corroborate a Word-related RCE risk, with the issue categorized under Office/Word vulnerabilities in July 2026 patch disclosures. Remediation is via Microsoft’s July 2026 se...

CVE-2026-70314

CVE-2026-70314 : Affects Microsoft Office. The issue arises from improper input validation, enabling a local attacker to disclose information. The CVSS v3.1 base metrics indicate a Medium severity (5.5) with Local attack vector, requiring user interaction, and no impact on integrity or availabili...

CVE-2026-45486

CVE-2026-45486 concerns an untrusted pointer dereference in Microsoft Word that can allow a local attacker to execute code. The CVSS metrics indicate a HIGH base score (7.8) with LOCAL attack vector, LOW attack complexity, and user interaction required, privileges NONE, reflecting a local impact ...

CVE-2026-44822

CVE-2026-44822 describes an out-of-bounds read in Microsoft Office Excel that can allow an unauthenticated attacker to disclose information over the network. Affected product: Microsoft Excel within Office. Underlying cause is an out-of-bounds read; the CVSS 3.1 base score is 8.2 (High) with netw...

CVE-2026-64903

CVE-2026-64903 : Affected product is Microsoft Office. The vulnerability is an integer overflow/wraparound in Office components that allows an unauthorized attacker to execute code locally on a vulnerable host (attack vector: LOCAL; user interaction required; impact: confidentiality, integrity, a...

CVE-2026-68813

Technical details about CVE-2026-68813 are not publicly provided in the supplied connected documents. Monitor for updates from official sources to obtain affected product/version, root cause, impact, and remediation information.

CVE-2026-70322

CVE-2026-70322 affects Microsoft Office PowerPoint. Cause: improper input validation in PowerPoint leading to local information disclosure when exploited by a local user with no privileges required. CVSS 3.1 base score 5.5 (MEDIUM); attack vector LOCAL, user interaction REQUIRED, confidentiality ...

CVE-2026-55038

CVE-2026-55038 is a stack-based buffer overflow in Microsoft Word (Office) that can allow local code execution. The vulnerability affects Word and is exploitable by a crafted file opened by a user with no privileges required, though user interaction is needed (per CVSS: LOCAL, UI: REQUIRED, Privi...

CVE-2026-55128

CVE-2026-55128 is a Use-after-free in Microsoft Word that enables local code execution by an unauthenticated attacker who powers the exploit via a crafted file/link. Affected product scope is Microsoft Word/Office as per Microsoft advisories; document does not specify exact vulnerable builds or p...

CVE-2026-55129

CVE-2026-55129 is a Microsoft Office remote code execution vulnerability described as a heap-based buffer overflow that could allow an attacker to run code locally. Available sources identify the affected surface as Microsoft Office components, with Office-based exploitation involving opening a m...

CVE-2026-64915

CVE-2026-64915 affects Microsoft Word, with a heap-based buffer overflow that permits local code execution. Exploitation requires local access and user interaction; CVSS v3.1 base score 7.8 (HIGH). A patch/mitigation is available from Microsoft via the MSRC advisory referenced in the entry (updat...

CVE-2026-55045

CVE-2026-55045 is an Office remote code execution vulnerability described as an out-of-bounds read in Microsoft Office that could enable a local attacker to execute code. Connected sources tie this CVE to Microsoft Office components (Word/PowerPoint/SharePoint) with local-exploit prerequisites an...

CVE-2026-63526

CVE-2026-63526 is a stack-based buffer overflow in the Microsoft Office Graphics Component that can allow an attacker with local access to execute code on a vulnerable system. Affected software is Microsoft Office (Graphics Component). The underlying issue is a buffer overflow in the component’s ...

CVE-2026-68815

CVE-2026-68815 (Microsoft Excel) involves a heap-based buffer overflow in Excel that allows local code execution by an unauthorized attacker; the exploitation requires user interaction and has a high impact on confidentiality, integrity, and availability. Product: Microsoft Office Excel (Windows)...

CVE-2026-44821

The CVE-2026-44821 entry concerns an out-of-bounds read in Microsoft Office that could allow a local attacker to disclose information. Affected software is Microsoft Office; the vulnerability is a read boundary issue in a component/file used by Office, enabling local information disclosure. The p...

CVE-2026-55139

Technical details for CVE-2026-55139 are not publicly available in the provided documents. Available sources mention exposure in Microsoft Office but do not specify affected products, versions, root cause, or remediation. Monitor for official updates.

CVE-2026-65657

Microsoft Office contains a use-after-free vulnerability (CVE-2026-65657) that allows a local attacker to execute code on the affected host. CVSS v3.1 base score 7.8 (HIGH), attack vector LOCAL, attack complexity LOW, privileges required NONE, user interaction REQUIRED, and impact HIGH for confid...

CVE-2026-55037

CVE-2026-55037 affects Microsoft Office Excel. A heap-based buffer overflow in Excel allows an unauthenticated/unauthorized attacker to execute arbitrary code locally. The CVSSv3.1 vector indicates a local attack with low attack complexity, no privileges required, but user interaction is required...

CVE-2026-63531

CVE-2026-63531 is a Microsoft Office Word vulnerability described as an out-of-bounds read that allows a local, unauthenticated attacker to disclose information. The CVSS v3.1 base score is 5.5 (Medium), with attack vector Local, required user interaction, low attack complexity, and a High impact...

CVE-2026-63533

Microsoft Office is affected by CVE-2026-63533, described as a heap-based buffer overflow that allows an unauthorized attacker to execute code locally. The available sources (NVD and CVE records) confirm a local exploit scenario with a base CVSS v3.1 score of 7.8 (HIGH) and impact to confidential...

CVE-2026-64905

CVE-2026-64905 is a Microsoft Office Word vulnerability described as a buffer over-read that could allow an attacker to execute code locally. Affected product: Microsoft Word. Root cause: unspecified in provided documents beyond the buffer over-read description. Impact: arbitrary code execution w...

CVE-2026-70325

CVE-2026-70325 affects Microsoft Office PowerPoint. Improper input validation in PowerPoint allows local information disclosure. Attack vector is Local with User Interaction required; impact is Confidentiality (information disclosure). Base score 5.5 (CVSS 3.1). No further exploitation details or...

CVE-2026-55138

CVE-2026-55138 is an information disclosure vulnerability affecting Microsoft Excel (Office). The issue is caused by an untrusted pointer dereference in Excel, allowing a local attacker to disclose information on the affected system. CVSS shows a Local attack vector, user interaction required, wi...

CVE-2026-55142

Microsoft Word within Office is affected by CVE-2026-55142 due to a numeric truncation error that can disclose information locally. Exploitation is local with required user interaction; the advisory notes a security update from Microsoft as remediation. References to July 2026 Office advisories c...

CVE-2026-70319

CVE-2026-70319 involves Microsoft Office Word with an issue in the handling of input validation. The root cause is reported as improper input validation, leading to an information disclosure vulnerability that can be exploited locally by an unauthenticated attacker who can cause the application t...

CVE-2026-45460

CVE-2026-45460 is an information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read in a Microsoft Office component. It allows a local, unauthenticated attacker to disclose information (confidentiality impact). The CVSSv3.1 metrics indicate a Local attack vector, High ex...

CVE-2026-47642

CVE-2026-47642 is a Microsoft Office Excel vulnerability described as a use-after-free in Excel that enables a local attacker to execute code. The connected sources confirm the issue affects Microsoft Excel and is capable of arbitrary-code execution, with a CVSSv3.1 base score of 7.8 (HIGH). Atta...

CVE-2026-50467

CVE-2026-50467 is a use-after-free vulnerability in Microsoft Office that can allow an attacker to execute code locally. The linked sources (Microsoft and third-party advisories) confirm Office as the affected product and describe the underlying issue as a use-after-free leading to arbitrary code...

CVE-2026-63519

CVE-2026-63519 is a heap-based buffer overflow in the Microsoft Office Graphics Component that enables local code execution. The NVD entry describes an attacker gaining code execution with local access due to memory corruption in Office, with a CVSSv3.1 base score of 7.8 (HIGH) and user interacti...

CVE-2026-55046

CVE-2026-55046 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally. The CVE is documented in multiple feeds (NVD, MSRC, CIRCL sightings) with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with use...

CVE-2026-55047

CVE-2026-55047 is a local, information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read. The NCSC advisory confirms presence across Microsoft Office offerings (Word, Excel, PowerPoint, SharePoint, and others) with an impact categorized as data exposure. Exploitation wo...

CVE-2026-55141

CVE-2026-55141 is a Microsoft Office Excel vulnerability described as a stack-based buffer overflow that allows a local attacker to execute code on the affected system. The CVE entry identifies Excel as the affected product and lists a high impact with a CVSS3.1 score of 7.8 (Local, High confiden...

CVE-2026-64911

CVE-2026-64911 is an integer overflow/wraparound vulnerability in Microsoft Office that enables local code execution by an attacker with user interaction. The root cause is an overflow in a Microsoft Office component, enabling a privileged or unauthenticated user to run arbitrary code locally onc...

CVE-2026-68803

CVE-2026-68803: A type confusion in Microsoft Excel enables local code execution. Affects Microsoft Excel (Office). Exploitation details: requires user interaction and local access per CVSS, with high impact on confidentiality, integrity, and availability. Root cause: resource access using an inc...

CVE-2026-45643

Summary of CVE-2026-45643 : Affected product is Microsoft Word (Office). The vulnerability is an untrusted pointer dereference in Word that allows an attacker to achieve local code execution on a vulnerable system with high impact (confidentiality, integrity, and availability). The CVSS-3.1 vecto...

CVE-2026-55123

CVE-2026-55123 is a heap-based buffer overflow in Microsoft Office PowerPoint that allows local code execution when a user opens a malicious file or link. Affected component is PowerPoint within Microsoft Office; root cause is a heap-based overflow leading to arbitrary code execution. Microsoft’s...

CVE-2026-55124

CVE-2026-55124 is a Microsoft Word/Office vulnerability where the root cause is improper validation of a specified input type, leading to local information disclosure. Documents consistently describe Word as the affected component and report a local attack vector with user interaction required (p...

CVE-2026-55948

CVE-2026-55948 is a use-after-free vulnerability in Microsoft Office Excel that can allow local code execution. Affected: Excel (Office). Root cause: use-after-free in the Excel component. Impact: HIGH for confidentiality, integrity, and availability. CVSS v3.1 base score 7.8; attack vector LOCAL...

CVE-2026-70323

CVE-2026-70323 – Microsoft Office contains an improper input validation flaw that can allow an unauthorized attacker to locally disclose information. The CVSS v3.1 metrics indicate a Medium base score (5.5) with a Local attack vector, requiring user interaction, and no impact to availability or i...

CVE-2026-45466

CVE-2026-45466 : Heap-based buffer overflow in Microsoft Word can allow a local attacker to disclose information. Affected product: Microsoft Word (Office). Vulnerability type: heap-based overflow in Word’s handling of content. Impact: confidentiality leakage (low), local access required with use...

CVE-2026-55025

CVE-2026-55025 affects Microsoft Office Excel. Root cause: a type confusion in Excel handling resources that allows an unauthenticated attacker to run arbitrary code locally. The vulnerability is classified as high impact (CVSSv3.1: 7.8, High) with local attack vector, no privileges required, but...

CVE-2026-55043

CVE-2026-55043 is a heap-based buffer overflow in Microsoft Office PowerPoint that allows an attacker to execute code locally. The vulnerability affects PowerPoint files (triggered by opening a crafted document) and is categorized with a high impact (local code execution) in CVSS 3.1, with exploi...

CVE-2026-55048

CVE-2026-55048 affects Microsoft Office Excel (and overall Office ecosystem in related advisories) with an integer overflow/wraparound in Excel leading to local code execution. The official CVE notes an unauthorized attacker can execute code locally; attack vector is LOCAL with user interaction r...

CVE-2026-55053

CVE-2026-55053 – Microsoft Excel heap-based buffer overflow in Microsoft Office Excel enables a local attacker to execute arbitrary code. The issue is described as a heap-based overflow affecting Excel, with the CVSS v3.1 vector indicating local attack, low attack complexity, and user interaction...

CVE-2026-55058

CVE-2026-55058 is an out-of-bounds read vulnerability in Microsoft Office Excel . The issue enables a local attacker to achieve remote code execution on a vulnerable system, as indicated by the CVSS vector: LOCAL attack, LOW attack complexity, with no privileges required and user interaction need...