CVE-2026-45643

Summary of CVE-2026-45643 : Affected product is Microsoft Word (Office). The vulnerability is an untrusted pointer dereference in Word that allows an attacker to achieve local code execution on a vulnerable system with high impact (confidentiality, integrity, and availability). The CVSS-3.1 vecto...

CVE-2026-54131

CVE-2026-54131 is an Office Excel vulnerability (use-after-free) that allows a local attacker to execute arbitrary code. Based on the sources, the issue affects Microsoft Excel components and stems from a use-after-free condition that can be triggered by handling crafted Excel objects/files, lead...

CVE-2026-55124

CVE-2026-55124 is a Microsoft Word/Office vulnerability where the root cause is improper validation of a specified input type, leading to local information disclosure. Documents consistently describe Word as the affected component and report a local attack vector with user interaction required (p...

CVE-2026-55033

CVE-2026-55033 is a Microsoft Word vulnerability described as an integer overflow/wraparound in Word’s document processing, enabling a local attacker to execute arbitrary code by opening a crafted Word file or link. The root cause is an overflow in Word’s handling, with impact described as local ...

CVE-2026-56193

CVE-2026-56193 describes an out-of-bounds read in Microsoft Office that allows a local attacker to disclose information. The available records indicate a high-severity impact (Confidentiality and Availability) with local access and user interaction required, but no explicit details on affected Of...

CVE-2026-64910

CVE-2026-64910 : Microsoft Office contains an untrusted pointer dereference that enables an attacker with local access and user interaction to execute code on the system. The CVSSv3.1 base score is 7.8 (HIGH) with local attack vector, required user interaction, and impact to confidentiality, inte...

CVE-2026-54988

CVE-2026-54988 is an out-of-bounds read vulnerability affecting Microsoft Excel, enabling a local attacker to disclose information. The existing sources confirm the vulnerability in Microsoft Office Excel with local access requiring user interaction, but do not specify exact vulnerable versions, ...

CVE-2026-55042

Technical details about CVE-2026-55042 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-55120

CVE-2026-55120 is a heap-based buffer overflow in Microsoft Office PowerPoint that enables a local attacker to execute arbitrary code. The vulnerability is documented across multiple feeds (NVD, CIRCL, NCSC, CVE List) and is associated with PowerPoint, with exploitation requiring user interaction...

CVE-2026-55947

CVE-2026-55947 is a Microsoft Excel vulnerability described as a heap-based buffer overflow in Microsoft Office Excel that enables local code execution. Affected product: Microsoft Office Excel (Office suite). Root cause: heap-based buffer overflow in Excel components, leading to arbitrary code e...

CVE-2026-68807

CVE-2026-68807 describes a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code. Affected product: Microsoft Excel; vulnerability type: heap-based overflow in a component handling input data, enabling remote-like control of the process after local code...

CVE-2026-81956

CVE-2026-81956 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The attack requires user interaction (e.g., opening a malicious file) and needs no prior privileges. The assigned CVSS 3.1 score is 7.8 (HIGH) with high impact to confi...

CVE-2026-44821

The CVE-2026-44821 entry concerns an out-of-bounds read in Microsoft Office that could allow a local attacker to disclose information. Affected software is Microsoft Office; the vulnerability is a read boundary issue in a component/file used by Office, enabling local information disclosure. The p...

CVE-2026-69632

A use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network . The attack requires user interaction (per CVSS vector UI:R) but no prior authentication. The CVSS v3.1 base score is 8.8 (HIGH) with full impact to confidentiality,...

CVE-2026-69767

CVE-2026-69767 is a use after free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interacti...

CVE-2026-64917

CVE-2026-64917 : An out-of-bounds read in Microsoft Office Word can allow a local attacker to disclose information. Affects Word-related processing; root cause is an out-of-bounds read leading to a confidentiality impact (C:H, I:N, A:N) with a CVSS v3.1 base score of 5.5 (Local access, no privile...

CVE-2026-70315

CVE-2026-70315 relates to Microsoft Office and is described as an out-of-bounds read that allows local information disclosure. The provided documents do not specify exact affected Office versions or remediation details. CVSSv3.1 base score is 5.5 (Medium) with Local attack vector, User Interactio...

CVE-2026-78517

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized, remote attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, no required privileges, but user interaction required. CISA's SSVC assessment rates exploi...

CVE-2026-81947

Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized attacker to execute code locally (CVSS v3.1 score 7.8 HIGH ). The attack requires user interaction (e.g., opening a malicious file) and no prior privileges. Impact spans confidentiality, integrity, and ...

CVE-2026-55898

CVE-2026-55898 concerns an Out-of-bounds read in Microsoft Office Excel , enabling an unauthorized local attacker to disclose information. The available documents identify Excel as the affected product and describe the root cause as an out-of-bounds read that leads to information disclosure local...

CVE-2026-58618

CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...

CVE-2026-45475

This CVE (CVE-2026-45475) concerns a heap-based buffer overflow in Microsoft Office. The description indicates an unauthorized attacker could achieve local code execution, with user interaction required and high impact on confidentiality, integrity, and availability. The provided documents do not...

CVE-2026-81960

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve local code execution . The vulnerability requires user interaction (e.g., opening a malicious file) but no prior privileges. The assigned CVSS 3.1 score is 7.8 (HIGH) with full impact to confidential...

CVE-2026-55029

CVE-2026-55029 is a heap-based buffer overflow affecting Microsoft Excel (part of Microsoft Office). The connected sources consistently describe the vulnerability as allowing an unauthenticated attacker to execute arbitrary code locally by crafting a malicious Excel/Office file, with the impact d...

CVE-2026-55036

CVE-2026-55036 is a Microsoft Office Excel vulnerability described as a buffer over-read that allows an attacker to execute code locally. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and no privileges required but user interaction is required. The descrip...

CVE-2026-55137

CVE-2026-55137 in Microsoft Excel is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized, locally executed code when a user opens a malicious file or link. The CVSS 3.1 vector (L, L, N, R, U, C/H/I/H/A/H) indicates a HIGH-severity, local attack requiring user intera...

CVE-2026-55139

Technical details for CVE-2026-55139 are not publicly available in the provided documents. Available sources mention exposure in Microsoft Office but do not specify affected products, versions, root cause, or remediation. Monitor for official updates.

CVE-2026-63530

CVE-2026-63530 describes an out-of-bounds read in Microsoft Office Word that enables a local attacker to disclose information. The available documents confirm the affected product is Word; the vulnerability is a read bounds issue, with impact limited to information disclosure. No specific Word ve...

CVE-2026-69797

CVE-2026-69797 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The attacker must persuade a user to open a crafted file, as the CVSS vector includes user interaction required (CVSS 3.1: 8.8 HIGH...

CVE-2026-70327

CVE-2026-70327: Out-of-bounds read in Microsoft Office Excel allows an unauthenticated attacker to disclose information over a network. Affected product: Microsoft Excel; root cause: out-of-bounds read. Impact: information disclosure. CVSS: Network vector, high confidentiality impact, base score ...

CVE-2026-78525

CVE-2026-78525 is a use-after-free vulnerability in Microsoft Office Outlook that allows an unauthenticated, remote attacker to achieve remote code execution . The CVSS v3.1 base score is 8.8 (High) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning user interaction is required but n...

CVE-2026-81392

CVE-2026-81392 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized, local attacker to disclose information . The CVSS v3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interaction and a loca...

CVE-2026-81399

CVE-2026-81399 is a buffer over-read vulnerability in Microsoft Office Excel that allows a local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with the vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interaction (e.g., opening a crafted file)...

CVE-2026-56195

Technical details about CVE-2026-56195 are not publicly available in the provided documents. Monitor for updates from Microsoft and third-party advisories.

CVE-2026-72975

CVE-2026-72975 is an out-of-bounds read in Microsoft Office PowerPoint that allows an unauthenticated remote attacker to disclose information over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 scores it 6.5 (Medium) , with ...

CVE-2026-81401

CVE-2026-81401 is a type confusion vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally . The flaw stems from access of a resource using an incompatible type. The assigned CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low comple...

CVE-2026-45457

CVE-2026-45457 affects Microsoft Word (Office). The vulnerability is a pointer dereference in Word that can allow a local attacker to execute code on the affected system after user interaction. Root cause is an untrusted pointer dereference in Word’s handling of certain content. The CVSS base met...

CVE-2026-45466

CVE-2026-45466 : Heap-based buffer overflow in Microsoft Word can allow a local attacker to disclose information. Affected product: Microsoft Word (Office). Vulnerability type: heap-based overflow in Word’s handling of content. Impact: confidentiality leakage (low), local access required with use...

CVE-2026-50678

CVE-2026-50678: A heap-based buffer overflow in Microsoft Excel (Office) allows local information disclosure. CVSS v3.1 base score 6.6 (Medium): AV:L, AC:L, PR:N, UI:R, S:U, C:L, I:L, A:H. No exploit details are provided in the accompanying documents; remediation status/patch info not specified.

CVE-2026-69678

Microsoft Office PowerPoint is affected by a use-after-free vulnerability that allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with user interaction required and no prior privileges. The attack vector is network-based with low complexity, yie...

CVE-2026-80089

CVE-2026-80089 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a network vector, low attack complexity, no privileges required, and user interaction required, resultin...

CVE-2026-55023

CVE-2026-55023 is a Microsoft Office information-disclosure vulnerability described as an out-of-bounds read that could allow a local attacker to disclose information. CVSS v3.1 base score 5.5 (MEDIUM): attack vector LOCAL, attack complexity LOW, privileges required NONE, user interaction REQUIRE...

CVE-2026-55031

CVE-2026-55031 is a Microsoft Office Excel vulnerability described as an out-of-bounds read that allows a locally authenticated attacker to execute code. The CVSS‑3.1 vector is Local, with Low attack complexity, and no privileges required, but user interaction is required and the impact is High f...

CVE-2026-55039

CVE-2026-55039 affects Microsoft Excel (Office suite). The vulnerability is described as an integer underflow/wraparound in Excel that can allow an attacker to execute arbitrary code locally. According to the CVE record and linked advisories, the impact is remote code execution on the target mach...

CVE-2026-55050

CVE-2026-55050 is a Microsoft Word vulnerability: an out-of-bounds read could allow a local attacker to disclose information. Affected software is Microsoft Word (Office suite). Root cause is an out-of-bounds read in Word, enabling local information disclosure. Base CVSS 3.1 score is 5.5 (Medium)...

CVE-2026-55056

CVE-2026-55056 is a heap-based buffer overflow in Microsoft Office that enables local code execution via parsing/processing of Office documents. Affected: Microsoft Office and related components. Root cause: heap-based overflow. Impact: unauthorized local code execution with high severity. Status...

CVE-2026-55131

Root cause: a heap-based buffer overflow in Microsoft Office Excel (part of Microsoft Office) allows an attacker to execute code locally. Affected: Excel; vulnerability appears to enable local code execution upon exploitation of the overflow. CVSSv3.1 metrics indicate Local access, No privileges ...

CVE-2026-70316

The CVE-2026-70316 entry concerns an improper input validation flaw in Microsoft Office PowerPoint that can cause an information disclosure locally . According to the available data, the vulnerability has a MEDIUM base score (CVSS 3.1: 5.5) with a LOCAL attack vector, requiring user interaction a...

CVE-2026-78515

CVE-2026-78515 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized, remote attacker to disclose information over a network. The attack requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 scores it 6.5 (Medium) with high confidentia...

CVE-2026-55899

Microsoft Excel is affected by a stack-based buffer overflow (CVE-2026-55899) that can allow a local attacker to execute code with high impact. The CVSS indicates local access with user interaction required and high confidentiality/integrity/availability impact. Root cause: overflow in Excel’s ha...