CVE-2026-45485

CVE-2026-45485: In Microsoft Office, an out-of-bounds read leads to local information disclosure. Documents confirm the vulnerability and its impact (local disclosure) with low severity (CVSS 3.1:3.3). Exploitation details and affected component/version specifics are not provided in the supplied ...

CVE-2026-47642

CVE-2026-47642 is a Microsoft Office Excel vulnerability described as a use-after-free in Excel that enables a local attacker to execute code. The connected sources confirm the issue affects Microsoft Excel and is capable of arbitrary-code execution, with a CVSSv3.1 base score of 7.8 (HIGH). Atta...

CVE-2026-55032

CVE-2026-55032 is a Microsoft Word remote code execution vulnerability reported as a use-after-free issue in Microsoft Office Word. The CVE entry specifies local attack vector with user interaction required, yielding a high severity (CVSS 3.1: 7.8, HIGH) and potential for arbitrary code execution...

CVE-2026-68808

CVE-2026-68808 affects Microsoft Excel (Office) with an out-of-bounds read that allows a local attacker to disclose information. Root cause: out-of-bounds read in Excel. Impact: local information disclosure; CVSSv3.1 metrics indicate Local access, no privileges, user interaction required, Confide...

CVE-2026-50408

CVE-2026-50408 is an information-disclosure vulnerability in Microsoft Office Excel caused by an out-of-bounds read that can disclose information locally to an attacker. The NVD/NCSC entries corroborate Excel as the affected product; Microsoft’s MSRC entry labels it as a Excel information-disclos...

CVE-2026-55022

CVE-2026-55022 is a type-confusion vulnerability in Microsoft Office that could allow local code execution when a user opens a specially crafted file or clicks a malicious link in Office applications (Word/Excel/PowerPoint/SharePoint are affected as listed by public advisories). Connected sources...

CVE-2026-55121

CVE-2026-55121 corresponds to an out-of-bounds read in Microsoft Office that enables an unauthenticated or authorized local attacker to disclose information. The public descriptions across NVD/MSRC and EUVD notes indicate the vulnerability affects Microsoft Office components and results in local ...

CVE-2026-66807

CVE-2026-66807 is a Microsoft Office Graphics Component vulnerability described as a stack-based buffer overflow. Affected product is Microsoft Office/Graphics Component; impact centers on code execution with a CVSSv3.1 base score of 7.8 (HIGH). Exploitation vector/conflict exists between sources...

CVE-2026-45459

The CVE-2026-45459 entry concerns Microsoft Excel. A protection-mechanism failure in Excel is described as allowing a local attacker to bypass a security feature. According to the available data, the vulnerability has a low base score (CVSS 3.1: 3.3), with LOCAL attack vector, LOW attack complexi...

CVE-2026-55045

CVE-2026-55045 is an Office remote code execution vulnerability described as an out-of-bounds read in Microsoft Office that could enable a local attacker to execute code. Connected sources tie this CVE to Microsoft Office components (Word/PowerPoint/SharePoint) with local-exploit prerequisites an...

CVE-2026-45472

CVE-2026-45472 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. The connected sources (NVD, CVE listing) corroborate a local-execution impact due to a heap overflow in Office components. No explicit root-cause details beyond the hea...

CVE-2026-70314

CVE-2026-70314 : Affects Microsoft Office. The issue arises from improper input validation, enabling a local attacker to disclose information. The CVSS v3.1 base metrics indicate a Medium severity (5.5) with Local attack vector, requiring user interaction, and no impact on integrity or availabili...

CVE-2026-70319

CVE-2026-70319 involves Microsoft Office Word with an issue in the handling of input validation. The root cause is reported as improper input validation, leading to an information disclosure vulnerability that can be exploited locally by an unauthenticated attacker who can cause the application t...

CVE-2026-44823

The CVE-2026-44823 entry concerns an integer underflow (wrap or wraparound) in Microsoft Office Excel that could allow an attacker to execute code locally. Affected product: Microsoft Excel within Microsoft Office. The vulnerability is described as enabling local code execution with attack vector...

CVE-2026-50314

CVE-2026-50314 is a Microsoft Office use-after-free vulnerability that enables a local attacker to execute arbitrary code by convincing a user to open a malicious document or link (Office components implicated include Word/Excel/PowerPoint/SharePoint per provided sources). The issue is described ...

CVE-2026-63531

CVE-2026-63531 is a Microsoft Office Word vulnerability described as an out-of-bounds read that allows a local, unauthenticated attacker to disclose information. The CVSS v3.1 base score is 5.5 (Medium), with attack vector Local, required user interaction, low attack complexity, and a High impact...

CVE-2026-45461

CVE-2026-45461 describes a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. Documents confirm the vulnerability exists in Microsoft Office and indicate a local attack vector with high impact (C: HIGH, I: HIGH, A: HIGH) and a base score o...

CVE-2026-48580

CVE-2026-48580 affects Microsoft Office Excel. The vulnerability is an untrusted pointer dereference in Excel that can allow an attacker to disclose information locally. Based on linked sources, this is a local vulnerability with medium severity (CVSS 3.1: 5.5) and requires user interaction; expl...

CVE-2026-55140

CVE-2026-55140 is a Microsoft Office remote code execution vulnerability caused by a heap-based buffer overflow in Office components. An unauthorized attacker could exploit this locally to run arbitrary code on a vulnerable system, as described in multiple security sources. Connected documents co...

CVE-2026-65664

This CVE describes a heap-based buffer overflow in Microsoft Office that allows a local attacker to execute code. The available documents mention the vulnerability as a local code execution issue, but do not provide detailed affected versions, root cause analysis beyond the heap overflow, or reme...

CVE-2026-68800

CVE-2026-68800 is a heap-based overflow in Microsoft Office Excel that could allow a local attacker to execute code with the user’s privileges after exploiting via a crafted file opened or processed by Excel. Affected software is Microsoft Excel (Office). The advisory notes a local attack vector ...

CVE-2026-55038

CVE-2026-55038 is a stack-based buffer overflow in Microsoft Word (Office) that can allow local code execution. The vulnerability affects Word and is exploitable by a crafted file opened by a user with no privileges required, though user interaction is needed (per CVSS: LOCAL, UI: REQUIRED, Privi...

CVE-2026-68815

CVE-2026-68815 (Microsoft Excel) involves a heap-based buffer overflow in Excel that allows local code execution by an unauthorized attacker; the exploitation requires user interaction and has a high impact on confidentiality, integrity, and availability. Product: Microsoft Office Excel (Windows)...

CVE-2026-55037

CVE-2026-55037 affects Microsoft Office Excel. A heap-based buffer overflow in Excel allows an unauthenticated/unauthorized attacker to execute arbitrary code locally. The CVSSv3.1 vector indicates a local attack with low attack complexity, no privileges required, but user interaction is required...

CVE-2026-64903

CVE-2026-64903 : Affected product is Microsoft Office. The vulnerability is an integer overflow/wraparound in Office components that allows an unauthorized attacker to execute code locally on a vulnerable host (attack vector: LOCAL; user interaction required; impact: confidentiality, integrity, a...

CVE-2026-44824

CVE-2026-44824 affects Microsoft Office and is a heap-based buffer overflow that enables local code execution. The issue requires user interaction and has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, no privileges required, and high impact on confidentiality, integrity, and avai...

CVE-2026-45645

The provided data identify CVE-2026-45645 as a heap-based buffer overflow affecting Microsoft Office, enabling local code execution. Details show an exploit would require user interaction and has a local attack surface (attackVector: LOCAL, userInteraction: REQUIRED) with high impacts on confiden...

CVE-2026-50665

CVE-2026-50665 is described as an information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read, enabling a local attacker to disclose data. Public sources in the connected set reiterate the issue as a Microsoft Office vulnerability with potential to access sensitive in...

CVE-2026-55127

CVE-2026-55127 is a heap-based buffer overflow in Microsoft Word (Office) that enables local code execution. Public sources corroborate a Word-related RCE risk, with the issue categorized under Office/Word vulnerabilities in July 2026 patch disclosures. Remediation is via Microsoft’s July 2026 se...

CVE-2026-70322

CVE-2026-70322 affects Microsoft Office PowerPoint. Cause: improper input validation in PowerPoint leading to local information disclosure when exploited by a local user with no privileges required. CVSS 3.1 base score 5.5 (MEDIUM); attack vector LOCAL, user interaction REQUIRED, confidentiality ...

CVE-2026-44820

CVE-2026-44820 affects Microsoft Excel in Office. An integer underflow (wrap/wraparound) in Excel can allow a local attacker to execute code on the affected host. Exploitation requires local access and user interaction; no remote vector is indicated. The CVSS 3.1 base score is 7.8 (HIGH) with imp...

CVE-2026-45471

CVE-2026-45471 affects Microsoft Word and stems from an untrusted pointer dereference in Word’s runtime that can lead to local code execution. The CVSSv3.1 vector (L/Low complexity, no privileges required, user interaction required, local scope) yields a base score of 7.8 (HIGH). Documented impac...

CVE-2026-45486

CVE-2026-45486 concerns an untrusted pointer dereference in Microsoft Word that can allow a local attacker to execute code. The CVSS metrics indicate a HIGH base score (7.8) with LOCAL attack vector, LOW attack complexity, and user interaction required, privileges NONE, reflecting a local impact ...

CVE-2026-55128

CVE-2026-55128 is a Use-after-free in Microsoft Word that enables local code execution by an unauthenticated attacker who powers the exploit via a crafted file/link. Affected product scope is Microsoft Word/Office as per Microsoft advisories; document does not specify exact vulnerable builds or p...

CVE-2026-62842

CVE-2026-62842 is an out-of-bounds read in the Microsoft Office Graphics Component that allows a local attacker to disclose information. Exploitation is local with user interaction required; no privileges required and the impact is a confidentiality loss (C:H, I:N, A:N). The CVSSv3.1 base score i...

CVE-2026-68806

Microsoft Excel contains an out-of-bounds write vulnerability (CVE-2026-68806) that can allow an authenticated local attacker to execute code on the affected system. The CVE description specifies local code execution via an out-of-bounds write in Excel. The connected records confirm the issue is ...

CVE-2026-63533

Microsoft Office is affected by CVE-2026-63533, described as a heap-based buffer overflow that allows an unauthorized attacker to execute code locally. The available sources (NVD and CVE records) confirm a local exploit scenario with a base CVSS v3.1 score of 7.8 (HIGH) and impact to confidential...

CVE-2026-68813

Technical details about CVE-2026-68813 are not publicly provided in the supplied connected documents. Monitor for updates from official sources to obtain affected product/version, root cause, impact, and remediation information.

CVE-2026-63519

CVE-2026-63519 is a heap-based buffer overflow in the Microsoft Office Graphics Component that enables local code execution. The NVD entry describes an attacker gaining code execution with local access due to memory corruption in Office, with a CVSSv3.1 base score of 7.8 (HIGH) and user interacti...

CVE-2026-63532

CVE-2026-63532 affects Microsoft Office and is caused by an integer overflow/wraparound in a component of Office, enabling local code execution by an unauthenticated user with at least user interaction. The available sources describe the vulnerability class and impact but do not provide specific ...

CVE-2026-68797

CVE-2026-68797 describes an out-of-bounds read in Microsoft Office Excel that enables a local attacker to disclose information. The sources consistently identify Excel as the affected product; no specific versions, modules, or root-cause details beyond the general memory read bound violation are ...

CVE-2026-70312

The CVE affects Microsoft Office PowerPoint and stems from improper input validation, enabling a local attacker to disclose information. The payload would require local access and user interaction, with no privileges required beyond the attacker’s access context. Impact is limited to information ...

CVE-2026-55043

CVE-2026-55043 is a heap-based buffer overflow in Microsoft Office PowerPoint that allows an attacker to execute code locally. The vulnerability affects PowerPoint files (triggered by opening a crafted document) and is categorized with a high impact (local code execution) in CVSS 3.1, with exploi...

CVE-2026-55129

CVE-2026-55129 is a Microsoft Office remote code execution vulnerability described as a heap-based buffer overflow that could allow an attacker to run code locally. Available sources identify the affected surface as Microsoft Office components, with Office-based exploitation involving opening a m...

CVE-2026-55141

CVE-2026-55141 is a Microsoft Office Excel vulnerability described as a stack-based buffer overflow that allows a local attacker to execute code on the affected system. The CVE entry identifies Excel as the affected product and lists a high impact with a CVSS3.1 score of 7.8 (Local, High confiden...

CVE-2026-70323

CVE-2026-70323 – Microsoft Office contains an improper input validation flaw that can allow an unauthorized attacker to locally disclose information. The CVSS v3.1 metrics indicate a Medium base score (5.5) with a Local attack vector, requiring user interaction, and no impact to availability or i...

CVE-2026-55048

CVE-2026-55048 affects Microsoft Office Excel (and overall Office ecosystem in related advisories) with an integer overflow/wraparound in Excel leading to local code execution. The official CVE notes an unauthorized attacker can execute code locally; attack vector is LOCAL with user interaction r...

CVE-2026-55025

CVE-2026-55025 affects Microsoft Office Excel. Root cause: a type confusion in Excel handling resources that allows an unauthenticated attacker to run arbitrary code locally. The vulnerability is classified as high impact (CVSSv3.1: 7.8, High) with local attack vector, no privileges required, but...

CVE-2026-55046

CVE-2026-55046 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally. The CVE is documented in multiple feeds (NVD, MSRC, CIRCL sightings) with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with use...

CVE-2026-66809

The CVE-2026-66809 entry refers to an out-of-bounds read vulnerability in Microsoft Office, specifically affecting the Office Graphics Component. The vulnerability allows a local attacker to disclose information, with no privileges required, but user interaction required. CVSS v3.1 metrics indica...