CVE-2026-64910

CVE-2026-64910 : Microsoft Office contains an untrusted pointer dereference that enables an attacker with local access and user interaction to execute code on the system. The CVSSv3.1 base score is 7.8 (HIGH) with local attack vector, required user interaction, and impact to confidentiality, inte...

CVE-2026-64917

CVE-2026-64917 : An out-of-bounds read in Microsoft Office Word can allow a local attacker to disclose information. Affects Word-related processing; root cause is an out-of-bounds read leading to a confidentiality impact (C:H, I:N, A:N) with a CVSS v3.1 base score of 5.5 (Local access, no privile...

CVE-2026-68807

CVE-2026-68807 describes a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code. Affected product: Microsoft Excel; vulnerability type: heap-based overflow in a component handling input data, enabling remote-like control of the process after local code...

CVE-2026-55137

CVE-2026-55137 in Microsoft Excel is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized, locally executed code when a user opens a malicious file or link. The CVSS 3.1 vector (L, L, N, R, U, C/H/I/H/A/H) indicates a HIGH-severity, local attack requiring user intera...

CVE-2026-56156

CVE-2026-56156 is a heap-based buffer overflow in Microsoft Office Excel that enables local code execution. The affected software is Microsoft Office Excel (component of Office). Root cause described as a heap-based buffer overflow allowing an attacker to run code locally; exploitation requires l...

CVE-2026-63524

Technical details about CVE-2026-63524 are not publicly available in the provided documents. Monitor for updates from sources like NVD/MSRC for affected products, vulnerable components, and remediation.

CVE-2026-70315

CVE-2026-70315 relates to Microsoft Office and is described as an out-of-bounds read that allows local information disclosure. The provided documents do not specify exact affected Office versions or remediation details. CVSSv3.1 base score is 5.5 (Medium) with Local attack vector, User Interactio...

CVE-2026-55899

Microsoft Excel is affected by a stack-based buffer overflow (CVE-2026-55899) that can allow a local attacker to execute code with high impact. The CVSS indicates local access with user interaction required and high confidentiality/integrity/availability impact. Root cause: overflow in Excel’s ha...

CVE-2026-55949

CVE-2026-55949 affects Microsoft Office Excel. The issue is described as a use of an uninitialized resource enabling local code execution. CVSS 3.1 base score 7.8 (HIGH) with local attack vector, low attack complexity, no privileges required but user interaction is required. Exploitation details ...

CVE-2026-55023

CVE-2026-55023 is a Microsoft Office information-disclosure vulnerability described as an out-of-bounds read that could allow a local attacker to disclose information. CVSS v3.1 base score 5.5 (MEDIUM): attack vector LOCAL, attack complexity LOW, privileges required NONE, user interaction REQUIRE...

CVE-2026-55029

CVE-2026-55029 is a heap-based buffer overflow affecting Microsoft Excel (part of Microsoft Office). The connected sources consistently describe the vulnerability as allowing an unauthenticated attacker to execute arbitrary code locally by crafting a malicious Excel/Office file, with the impact d...

CVE-2026-63530

CVE-2026-63530 describes an out-of-bounds read in Microsoft Office Word that enables a local attacker to disclose information. The available documents confirm the affected product is Word; the vulnerability is a read bounds issue, with impact limited to information disclosure. No specific Word ve...

CVE-2026-55036

CVE-2026-55036 is a Microsoft Office Excel vulnerability described as a buffer over-read that allows an attacker to execute code locally. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and no privileges required but user interaction is required. The descrip...

CVE-2026-55131

Root cause: a heap-based buffer overflow in Microsoft Office Excel (part of Microsoft Office) allows an attacker to execute code locally. Affected: Excel; vulnerability appears to enable local code execution upon exploitation of the overflow. CVSSv3.1 metrics indicate Local access, No privileges ...

CVE-2026-55050

CVE-2026-55050 is a Microsoft Word vulnerability: an out-of-bounds read could allow a local attacker to disclose information. Affected software is Microsoft Word (Office suite). Root cause is an out-of-bounds read in Word, enabling local information disclosure. Base CVSS 3.1 score is 5.5 (Medium)...

CVE-2026-70316

The CVE-2026-70316 entry concerns an improper input validation flaw in Microsoft Office PowerPoint that can cause an information disclosure locally . According to the available data, the vulnerability has a MEDIUM base score (CVSS 3.1: 5.5) with a LOCAL attack vector, requiring user interaction a...

CVE-2026-70327

CVE-2026-70327: Out-of-bounds read in Microsoft Office Excel allows an unauthenticated attacker to disclose information over a network. Affected product: Microsoft Excel; root cause: out-of-bounds read. Impact: information disclosure. CVSS: Network vector, high confidentiality impact, base score ...

CVE-2026-55039

CVE-2026-55039 affects Microsoft Excel (Office suite). The vulnerability is described as an integer underflow/wraparound in Excel that can allow an attacker to execute arbitrary code locally. According to the CVE record and linked advisories, the impact is remote code execution on the target mach...

CVE-2026-68812

CVE-2026-68812 concerns a heap-based buffer overflow in Microsoft Excel (Office) that can allow a locally executed arbitrary code execution when a user opens or processes a malicious file. The root cause is memory corruption inside Excel’s handling of data structures, leading to control of the pr...

CVE-2026-55056

CVE-2026-55056 is a heap-based buffer overflow in Microsoft Office that enables local code execution via parsing/processing of Office documents. Affected: Microsoft Office and related components. Root cause: heap-based overflow. Impact: unauthorized local code execution with high severity. Status...