CVE-2026-55041

CVE-2026-55041 is a heap-based buffer overflow in Microsoft Office Excel that can allow a local attacker to execute arbitrary code. The issue affects Excel (and is reflected in the overall Office ecosystem advisories) and arises from a heap overflow in a component used by Excel. The CVSS v3.1 vec...

CVE-2026-56195

Technical details about CVE-2026-56195 are not publicly available in the provided documents. Monitor for updates from Microsoft and third-party advisories.

CVE-2026-55124

CVE-2026-55124 is a Microsoft Word/Office vulnerability where the root cause is improper validation of a specified input type, leading to local information disclosure. Documents consistently describe Word as the affected component and report a local attack vector with user interaction required (p...

CVE-2026-56193

CVE-2026-56193 describes an out-of-bounds read in Microsoft Office that allows a local attacker to disclose information. The available records indicate a high-severity impact (Confidentiality and Availability) with local access and user interaction required, but no explicit details on affected Of...

CVE-2026-54988

CVE-2026-54988 is an out-of-bounds read vulnerability affecting Microsoft Excel, enabling a local attacker to disclose information. The existing sources confirm the vulnerability in Microsoft Office Excel with local access requiring user interaction, but do not specify exact vulnerable versions, ...

CVE-2026-55046

CVE-2026-55046 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally. The CVE is documented in multiple feeds (NVD, MSRC, CIRCL sightings) with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with use...

CVE-2026-55048

CVE-2026-55048 affects Microsoft Office Excel (and overall Office ecosystem in related advisories) with an integer overflow/wraparound in Excel leading to local code execution. The official CVE notes an unauthorized attacker can execute code locally; attack vector is LOCAL with user interaction r...

CVE-2026-55057

Microsoft Office vulnerability CVE-2026-55057 is an information disclosure caused by an integer overflow/wraparound in Office components. The issue allows a local attacker to disclose information. Microsoft has published a July 2026 security update (KB5002887) addressing this vulnerability; apply...

CVE-2026-50675

CVE-2026-50675 describes a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code on the affected system. The connected sources confirm the issue is tied to Excel, with a high-severity CVSS 3.1 score (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No specific vul...

CVE-2026-55053

CVE-2026-55053 – Microsoft Excel heap-based buffer overflow in Microsoft Office Excel enables a local attacker to execute arbitrary code. The issue is described as a heap-based overflow affecting Excel, with the CVSS v3.1 vector indicating local attack, low attack complexity, and user interaction...

CVE-2026-55132

Microsoft Word/Office vulnerability CVE-2026-55132 involves a double-free in Word that could allow a local attacker to execute arbitrary code. Affected product: Microsoft Word (Office suite). Root cause: memory management flaw (double free) in Word’s handling of certain documents. Impact: local c...

CVE-2026-56156

CVE-2026-56156 is a heap-based buffer overflow in Microsoft Office Excel that enables local code execution. The affected software is Microsoft Office Excel (component of Office). Root cause described as a heap-based buffer overflow allowing an attacker to run code locally; exploitation requires l...

CVE-2026-55023

CVE-2026-55023 is a Microsoft Office information-disclosure vulnerability described as an out-of-bounds read that could allow a local attacker to disclose information. CVSS v3.1 base score 5.5 (MEDIUM): attack vector LOCAL, attack complexity LOW, privileges required NONE, user interaction REQUIRE...

CVE-2026-55026

CVE-2026-55026 is an Office-related vulnerability caused by an integer overflow/wraparound in Microsoft Office that enables local information disclosure. Affected: Microsoft Office components; root cause per the CVE entry is integer overflow. Impact per NVD: Confidentiality impact HIGH, no integr...

CVE-2026-55036

CVE-2026-55036 is a Microsoft Office Excel vulnerability described as a buffer over-read that allows an attacker to execute code locally. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and no privileges required but user interaction is required. The descrip...

CVE-2026-55949

CVE-2026-55949 affects Microsoft Office Excel. The issue is described as a use of an uninitialized resource enabling local code execution. CVSS 3.1 base score 7.8 (HIGH) with local attack vector, low attack complexity, no privileges required but user interaction is required. Exploitation details ...

CVE-2026-55018

CVE-2026-55018 is a use-after-free in Microsoft Office that enables local code execution. The vulnerability is listed among Microsoft Office family issues and is part of July 2026 updates; exploitation requires the user to open a malicious Office file or link (SharePoint variants may not require ...

CVE-2026-55025

CVE-2026-55025 affects Microsoft Office Excel. Root cause: a type confusion in Excel handling resources that allows an unauthenticated attacker to run arbitrary code locally. The vulnerability is classified as high impact (CVSSv3.1: 7.8, High) with local attack vector, no privileges required, but...

CVE-2026-55031

CVE-2026-55031 is a Microsoft Office Excel vulnerability described as an out-of-bounds read that allows a locally authenticated attacker to execute code. The CVSS‑3.1 vector is Local, with Low attack complexity, and no privileges required, but user interaction is required and the impact is High f...

CVE-2026-55038

CVE-2026-55038 is a stack-based buffer overflow in Microsoft Word (Office) that can allow local code execution. The vulnerability affects Word and is exploitable by a crafted file opened by a user with no privileges required, though user interaction is needed (per CVSS: LOCAL, UI: REQUIRED, Privi...

CVE-2026-55055

CVE-2026-55055 is a stack-based buffer overflow in Microsoft Word (part of Microsoft Office) that enables a local attacker to execute code. The vulnerability affects Word components and is documented with a CVSS 3.1 base score of 7.8 (High) with Local attack vector, user interaction required, and...

CVE-2026-55120

CVE-2026-55120 is a heap-based buffer overflow in Microsoft Office PowerPoint that enables a local attacker to execute arbitrary code. The vulnerability is documented across multiple feeds (NVD, CIRCL, NCSC, CVE List) and is associated with PowerPoint, with exploitation requiring user interaction...

CVE-2026-55133

CVE-2026-55133 affects Microsoft Office OneNote. The issue is a heap-based buffer overflow in OneNote that can allow a local attacker to execute code on the affected system. CVSSv3.1 indicates ATT&CK: local access, user interaction required, with high impact to confidentiality, integrity, and ava...

CVE-2026-55137

CVE-2026-55137 in Microsoft Excel is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized, locally executed code when a user opens a malicious file or link. The CVSS 3.1 vector (L, L, N, R, U, C/H/I/H/A/H) indicates a HIGH-severity, local attack requiring user intera...

CVE-2026-55948

CVE-2026-55948 is a use-after-free vulnerability in Microsoft Office Excel that can allow local code execution. Affected: Excel (Office). Root cause: use-after-free in the Excel component. Impact: HIGH for confidentiality, integrity, and availability. CVSS v3.1 base score 7.8; attack vector LOCAL...

CVE-2026-50678

CVE-2026-50678: A heap-based buffer overflow in Microsoft Excel (Office) allows local information disclosure. CVSS v3.1 base score 6.6 (Medium): AV:L, AC:L, PR:N, UI:R, S:U, C:L, I:L, A:H. No exploit details are provided in the accompanying documents; remediation status/patch info not specified.

CVE-2026-55027

CVE-2026-55027 is a Microsoft Office information-disclosure vulnerability described as an out-of-bounds read that can disclose local information. The CVE entry notes a local attacker with no privileges can trigger the issue, requiring user interaction (per CVSS: AV:L/AC:L/PR:N/UI:R). Connected so...

CVE-2026-55029

CVE-2026-55029 is a heap-based buffer overflow affecting Microsoft Excel (part of Microsoft Office). The connected sources consistently describe the vulnerability as allowing an unauthenticated attacker to execute arbitrary code locally by crafting a malicious Excel/Office file, with the impact d...

CVE-2026-55122

Technical details for CVE-2026-55122 are not publicly provided in the connected documents. The materials reference Excel Office vulnerabilities generally without specifics. Monitor for updates.

CVE-2026-55123

CVE-2026-55123 is a heap-based buffer overflow in Microsoft Office PowerPoint that allows local code execution when a user opens a malicious file or link. Affected component is PowerPoint within Microsoft Office; root cause is a heap-based overflow leading to arbitrary code execution. Microsoft’s...

CVE-2026-55128

CVE-2026-55128 is a Use-after-free in Microsoft Word that enables local code execution by an unauthenticated attacker who powers the exploit via a crafted file/link. Affected product scope is Microsoft Word/Office as per Microsoft advisories; document does not specify exact vulnerable builds or p...

CVE-2026-55898

CVE-2026-55898 concerns an Out-of-bounds read in Microsoft Office Excel , enabling an unauthorized local attacker to disclose information. The available documents identify Excel as the affected product and describe the root cause as an out-of-bounds read that leads to information disclosure local...

CVE-2026-55043

CVE-2026-55043 is a heap-based buffer overflow in Microsoft Office PowerPoint that allows an attacker to execute code locally. The vulnerability affects PowerPoint files (triggered by opening a crafted document) and is categorized with a high impact (local code execution) in CVSS 3.1, with exploi...

CVE-2026-55044

CVE-2026-55044: Out-of-bounds read in Microsoft Office Excel; vulnerability allows a local attacker to execute code. Affected product: Microsoft Office Excel. Root cause: out-of-bounds read (details not expanded in the provided docs). Impact: remote code execution on the local host with high seve...

CVE-2026-55045

CVE-2026-55045 is an Office remote code execution vulnerability described as an out-of-bounds read in Microsoft Office that could enable a local attacker to execute code. Connected sources tie this CVE to Microsoft Office components (Word/PowerPoint/SharePoint) with local-exploit prerequisites an...

CVE-2026-55050

CVE-2026-55050 is a Microsoft Word vulnerability: an out-of-bounds read could allow a local attacker to disclose information. Affected software is Microsoft Word (Office suite). Root cause is an out-of-bounds read in Word, enabling local information disclosure. Base CVSS 3.1 score is 5.5 (Medium)...

CVE-2026-55125

CVE-2026-55125 is a Microsoft Office heap-based buffer overflow that enables local code execution. The NVD entry reports a CVSS v3.1 base score of 7.8 (LOCAL, HIGH impact across confidentiality, integrity, and availability) with user interaction required. Connected sources corroborate Office-wide...

CVE-2026-55131

Root cause: a heap-based buffer overflow in Microsoft Office Excel (part of Microsoft Office) allows an attacker to execute code locally. Affected: Excel; vulnerability appears to enable local code execution upon exploitation of the overflow. CVSSv3.1 metrics indicate Local access, No privileges ...

CVE-2026-55899

Microsoft Excel is affected by a stack-based buffer overflow (CVE-2026-55899) that can allow a local attacker to execute code with high impact. The CVSS indicates local access with user interaction required and high confidentiality/integrity/availability impact. Root cause: overflow in Excel’s ha...

CVE-2026-55947

CVE-2026-55947 is a Microsoft Excel vulnerability described as a heap-based buffer overflow in Microsoft Office Excel that enables local code execution. Affected product: Microsoft Office Excel (Office suite). Root cause: heap-based buffer overflow in Excel components, leading to arbitrary code e...

CVE-2026-50665

CVE-2026-50665 is described as an information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read, enabling a local attacker to disclose data. Public sources in the connected set reiterate the issue as a Microsoft Office vulnerability with potential to access sensitive in...

CVE-2026-54131

CVE-2026-54131 is an Office Excel vulnerability (use-after-free) that allows a local attacker to execute arbitrary code. Based on the sources, the issue affects Microsoft Excel components and stems from a use-after-free condition that can be triggered by handling crafted Excel objects/files, lead...

CVE-2026-55024

CVE-2026-55024 – Microsoft Excel remote code execution . The vulnerability is described as an access of resource using incompatible type (type confusion) in Microsoft Office Excel, enabling an unauthorized attacker to execute code locally. Connected advisories (NCSC, ZDI, ENISA ENISA-style) indic...

CVE-2026-55141

CVE-2026-55141 is a Microsoft Office Excel vulnerability described as a stack-based buffer overflow that allows a local attacker to execute code on the affected system. The CVE entry identifies Excel as the affected product and lists a high impact with a CVSS3.1 score of 7.8 (Local, High confiden...

CVE-2026-58618

CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...

CVE-2026-55056

CVE-2026-55056 is a heap-based buffer overflow in Microsoft Office that enables local code execution via parsing/processing of Office documents. Affected: Microsoft Office and related components. Root cause: heap-based overflow. Impact: unauthorized local code execution with high severity. Status...

CVE-2026-55039

CVE-2026-55039 affects Microsoft Excel (Office suite). The vulnerability is described as an integer underflow/wraparound in Excel that can allow an attacker to execute arbitrary code locally. According to the CVE record and linked advisories, the impact is remote code execution on the target mach...

CVE-2026-55136

CVE-2026-55136 affects Microsoft Excel (part of Microsoft Office). The vulnerability is caused by an untrusted pointer dereference in Excel, enabling a local attacker to execute code on the affected system. CVSS 3.1 base score 7.8 (HIGH) with local access, no privileges required, user interaction...