CVE-2026-48580

CVE-2026-48580 affects Microsoft Office Excel. The vulnerability is an untrusted pointer dereference in Excel that can allow an attacker to disclose information locally. Based on linked sources, this is a local vulnerability with medium severity (CVSS 3.1: 5.5) and requires user interaction; expl...

CVE-2026-55142

Microsoft Word within Office is affected by CVE-2026-55142 due to a numeric truncation error that can disclose information locally. Exploitation is local with required user interaction; the advisory notes a security update from Microsoft as remediation. References to July 2026 Office advisories c...

CVE-2026-70312

The CVE affects Microsoft Office PowerPoint and stems from improper input validation, enabling a local attacker to disclose information. The payload would require local access and user interaction, with no privileges required beyond the attacker’s access context. Impact is limited to information ...

CVE-2026-45459

The CVE-2026-45459 entry concerns Microsoft Excel. A protection-mechanism failure in Excel is described as allowing a local attacker to bypass a security feature. According to the available data, the vulnerability has a low base score (CVSS 3.1: 3.3), with LOCAL attack vector, LOW attack complexi...

CVE-2026-44824

CVE-2026-44824 affects Microsoft Office and is a heap-based buffer overflow that enables local code execution. The issue requires user interaction and has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, no privileges required, and high impact on confidentiality, integrity, and avai...

CVE-2026-68797

CVE-2026-68797 describes an out-of-bounds read in Microsoft Office Excel that enables a local attacker to disclose information. The sources consistently identify Excel as the affected product; no specific versions, modules, or root-cause details beyond the general memory read bound violation are ...

CVE-2026-44823

The CVE-2026-44823 entry concerns an integer underflow (wrap or wraparound) in Microsoft Office Excel that could allow an attacker to execute code locally. Affected product: Microsoft Excel within Microsoft Office. The vulnerability is described as enabling local code execution with attack vector...

CVE-2026-55025

CVE-2026-55025 affects Microsoft Office Excel. Root cause: a type confusion in Excel handling resources that allows an unauthenticated attacker to run arbitrary code locally. The vulnerability is classified as high impact (CVSSv3.1: 7.8, High) with local attack vector, no privileges required, but...

CVE-2026-55048

CVE-2026-55048 affects Microsoft Office Excel (and overall Office ecosystem in related advisories) with an integer overflow/wraparound in Excel leading to local code execution. The official CVE notes an unauthorized attacker can execute code locally; attack vector is LOCAL with user interaction r...

CVE-2026-55141

CVE-2026-55141 is a Microsoft Office Excel vulnerability described as a stack-based buffer overflow that allows a local attacker to execute code on the affected system. The CVE entry identifies Excel as the affected product and lists a high impact with a CVSS3.1 score of 7.8 (Local, High confiden...

CVE-2026-63519

CVE-2026-63519 is a heap-based buffer overflow in the Microsoft Office Graphics Component that enables local code execution. The NVD entry describes an attacker gaining code execution with local access due to memory corruption in Office, with a CVSSv3.1 base score of 7.8 (HIGH) and user interacti...

CVE-2026-78524

CVE-2026-78524 is an out-of-bounds write vulnerability in Microsoft Office that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R, meaning exploitation requires user interaction but no prior authen...

CVE-2026-55058

CVE-2026-55058 is an out-of-bounds read vulnerability in Microsoft Office Excel . The issue enables a local attacker to achieve remote code execution on a vulnerable system, as indicated by the CVSS vector: LOCAL attack, LOW attack complexity, with no privileges required and user interaction need...

CVE-2026-63533

Microsoft Office is affected by CVE-2026-63533, described as a heap-based buffer overflow that allows an unauthorized attacker to execute code locally. The available sources (NVD and CVE records) confirm a local exploit scenario with a base CVSS v3.1 score of 7.8 (HIGH) and impact to confidential...

CVE-2026-64903

CVE-2026-64903 : Affected product is Microsoft Office. The vulnerability is an integer overflow/wraparound in Office components that allows an unauthorized attacker to execute code locally on a vulnerable host (attack vector: LOCAL; user interaction required; impact: confidentiality, integrity, a...

CVE-2026-81388

CVE-2026-81388 is a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The attack requires user interaction (e.g., opening a crafted file) and no prior privileges. The CVSS 3.1 score is 7.8 (HIGH) , with high impact to confidentiali...

CVE-2026-81951

CVE-2026-81951 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity, no privileges required, and user interaction required (i.e., a vict...

CVE-2026-44820

CVE-2026-44820 affects Microsoft Excel in Office. An integer underflow (wrap/wraparound) in Excel can allow a local attacker to execute code on the affected host. Exploitation requires local access and user interaction; no remote vector is indicated. The CVSS 3.1 base score is 7.8 (HIGH) with imp...

CVE-2026-45471

CVE-2026-45471 affects Microsoft Word and stems from an untrusted pointer dereference in Word’s runtime that can lead to local code execution. The CVSSv3.1 vector (L/Low complexity, no privileges required, user interaction required, local scope) yields a base score of 7.8 (HIGH). Documented impac...

CVE-2026-50467

CVE-2026-50467 is a use-after-free vulnerability in Microsoft Office that can allow an attacker to execute code locally. The linked sources (Microsoft and third-party advisories) confirm Office as the affected product and describe the underlying issue as a use-after-free leading to arbitrary code...

CVE-2026-55026

CVE-2026-55026 is an Office-related vulnerability caused by an integer overflow/wraparound in Microsoft Office that enables local information disclosure. Affected: Microsoft Office components; root cause per the CVE entry is integer overflow. Impact per NVD: Confidentiality impact HIGH, no integr...

CVE-2026-55046

CVE-2026-55046 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally. The CVE is documented in multiple feeds (NVD, MSRC, CIRCL sightings) with a CVSS v3.1 base score of 5.5 (Medium) and a local attack vector with use...

CVE-2026-64905

CVE-2026-64905 is a Microsoft Office Word vulnerability described as a buffer over-read that could allow an attacker to execute code locally. Affected product: Microsoft Word. Root cause: unspecified in provided documents beyond the buffer over-read description. Impact: arbitrary code execution w...

CVE-2026-45645

The provided data identify CVE-2026-45645 as a heap-based buffer overflow affecting Microsoft Office, enabling local code execution. Details show an exploit would require user interaction and has a local attack surface (attackVector: LOCAL, userInteraction: REQUIRED) with high impacts on confiden...

CVE-2026-64911

CVE-2026-64911 is an integer overflow/wraparound vulnerability in Microsoft Office that enables local code execution by an attacker with user interaction. The root cause is an overflow in a Microsoft Office component, enabling a privileged or unauthenticated user to run arbitrary code locally onc...

CVE-2026-77898

CVE-2026-77898 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted file) and has a high attack complexity , reflected in its CVSS 3.1 score of...

CVE-2026-81952

CVE-2026-81952 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network . The CVSS 3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e.g., op...

CVE-2026-55053

CVE-2026-55053 – Microsoft Excel heap-based buffer overflow in Microsoft Office Excel enables a local attacker to execute arbitrary code. The issue is described as a heap-based overflow affecting Excel, with the CVSS v3.1 vector indicating local attack, low attack complexity, and user interaction...

CVE-2026-55138

CVE-2026-55138 is an information disclosure vulnerability affecting Microsoft Excel (Office). The issue is caused by an untrusted pointer dereference in Excel, allowing a local attacker to disclose information on the affected system. CVSS shows a Local attack vector, user interaction required, wi...

CVE-2026-70311

CVE-2026-70311 : The vulnerability is a Use-After-Free in Microsoft Office Word that allows an unauthenticated or local attacker to execute arbitrary code. The issue stems from a memory-management defect in Word that can be triggered locally, with the CVSSv3.1 vector indicating local attack, no p...

CVE-2026-55028

CVE-2026-55028 is an Office vulnerability described as an out-of-bounds read in Microsoft Office that allows an unauthorized attacker to disclose information locally. The CVE is tied to Office components (Word/Excel/PowerPoint/SharePoint) and is listed with a local attack vector, requiring user i...

CVE-2026-55043

CVE-2026-55043 is a heap-based buffer overflow in Microsoft Office PowerPoint that allows an attacker to execute code locally. The vulnerability affects PowerPoint files (triggered by opening a crafted document) and is categorized with a high impact (local code execution) in CVSS 3.1, with exploi...

CVE-2026-55055

CVE-2026-55055 is a stack-based buffer overflow in Microsoft Word (part of Microsoft Office) that enables a local attacker to execute code. The vulnerability affects Word components and is documented with a CVSS 3.1 base score of 7.8 (High) with Local attack vector, user interaction required, and...

CVE-2026-63524

Technical details about CVE-2026-63524 are not publicly available in the provided documents. Monitor for updates from sources like NVD/MSRC for affected products, vulnerable components, and remediation.

CVE-2026-64904

CVE-2026-64904 describes a type confusion in Microsoft Office that allows local code execution on affected systems. The CVSS 3.1 base score is 7.8 (HIGH), with local attack vector, required user interaction, and impact to confidentiality, integrity, and availability. Affected product details are ...

CVE-2026-68812

CVE-2026-68812 concerns a heap-based buffer overflow in Microsoft Excel (Office) that can allow a locally executed arbitrary code execution when a user opens or processes a malicious file. The root cause is memory corruption inside Excel’s handling of data structures, leading to control of the pr...

CVE-2026-45486

CVE-2026-45486 concerns an untrusted pointer dereference in Microsoft Word that can allow a local attacker to execute code. The CVSS metrics indicate a HIGH base score (7.8) with LOCAL attack vector, LOW attack complexity, and user interaction required, privileges NONE, reflecting a local impact ...

CVE-2026-50675

CVE-2026-50675 describes a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code on the affected system. The connected sources confirm the issue is tied to Excel, with a high-severity CVSS 3.1 score (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No specific vul...

CVE-2026-55027

CVE-2026-55027 is a Microsoft Office information-disclosure vulnerability described as an out-of-bounds read that can disclose local information. The CVE entry notes a local attacker with no privileges can trigger the issue, requiring user interaction (per CVSS: AV:L/AC:L/PR:N/UI:R). Connected so...

CVE-2026-70317

This CVE (CVE-2026-70317) concerns Microsoft Office and is caused by the use of an uninitialized resource, enabling an attacker to disclose information locally. The NVD/CVE records indicate a local attack vector with low complexity and no privileges required, but user interaction is required. The...

CVE-2026-44822

CVE-2026-44822 describes an out-of-bounds read in Microsoft Office Excel that can allow an unauthenticated attacker to disclose information over the network. Affected product: Microsoft Excel within Office. Underlying cause is an out-of-bounds read; the CVSS 3.1 base score is 8.2 (High) with netw...

CVE-2026-55047

CVE-2026-55047 is a local, information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read. The NCSC advisory confirms presence across Microsoft Office offerings (Word, Excel, PowerPoint, SharePoint, and others) with an impact categorized as data exposure. Exploitation wo...

CVE-2026-55122

Technical details for CVE-2026-55122 are not publicly provided in the connected documents. The materials reference Excel Office vulnerabilities generally without specifics. Monitor for updates.

CVE-2026-55129

CVE-2026-55129 is a Microsoft Office remote code execution vulnerability described as a heap-based buffer overflow that could allow an attacker to run code locally. Available sources identify the affected surface as Microsoft Office components, with Office-based exploitation involving opening a m...

CVE-2026-45460

CVE-2026-45460 is an information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read in a Microsoft Office component. It allows a local, unauthenticated attacker to disclose information (confidentiality impact). The CVSSv3.1 metrics indicate a Local attack vector, High ex...

CVE-2026-55057

Microsoft Office vulnerability CVE-2026-55057 is an information disclosure caused by an integer overflow/wraparound in Office components. The issue allows a local attacker to disclose information. Microsoft has published a July 2026 security update (KB5002887) addressing this vulnerability; apply...

CVE-2026-55948

CVE-2026-55948 is a use-after-free vulnerability in Microsoft Office Excel that can allow local code execution. Affected: Excel (Office). Root cause: use-after-free in the Excel component. Impact: HIGH for confidentiality, integrity, and availability. CVSS v3.1 base score 7.8; attack vector LOCAL...

CVE-2026-55018

CVE-2026-55018 is a use-after-free in Microsoft Office that enables local code execution. The vulnerability is listed among Microsoft Office family issues and is part of July 2026 updates; exploitation requires the user to open a malicious Office file or link (SharePoint variants may not require ...

CVE-2026-55123

CVE-2026-55123 is a heap-based buffer overflow in Microsoft Office PowerPoint that allows local code execution when a user opens a malicious file or link. Affected component is PowerPoint within Microsoft Office; root cause is a heap-based overflow leading to arbitrary code execution. Microsoft’s...

CVE-2026-55136

CVE-2026-55136 affects Microsoft Excel (part of Microsoft Office). The vulnerability is caused by an untrusted pointer dereference in Excel, enabling a local attacker to execute code on the affected system. CVSS 3.1 base score 7.8 (HIGH) with local access, no privileges required, user interaction...