CVE-2026-81960

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve local code execution . The vulnerability requires user interaction (e.g., opening a malicious file) but no prior privileges. The assigned CVSS 3.1 score is 7.8 (HIGH) with full impact to confidential...

CVE-2026-80082

CVE-2026-80082 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating network attack vector, low complexity, no priv...

CVE-2026-80089

CVE-2026-80089 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a network vector, low attack complexity, no privileges required, and user interaction required, resultin...

CVE-2026-81398

CVE-2026-81398 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning a local attack with low complexity requires user interaction (e.g....

CVE-2026-81956

CVE-2026-81956 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The attack requires user interaction (e.g., opening a malicious file) and needs no prior privileges. The assigned CVSS 3.1 score is 7.8 (HIGH) with high impact to confi...

CVE-2026-69759

CVE-2026-69759 is a stack-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , with the vector requiring user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), meaning an a...

CVE-2026-78513

CVE-2026-78513 is an out-of-bounds read in Microsoft Office PowerPoint that allows an unauthorized local attacker to disclose information . The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 score is 5.5 (MEDIUM) with high confidentiality ...

CVE-2026-81401

CVE-2026-81401 is a type confusion vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally . The flaw stems from access of a resource using an incompatible type. The assigned CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low comple...

CVE-2026-80086

CVE-2026-80086 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 base score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating a network-based attack with l...

CVE-2026-81391

CVE-2026-81391 is an information disclosure vulnerability in Microsoft Office Excel caused by a use of uninitialized resource . An unauthorized local attacker with user interaction can disclose information, rated CVSS 5.5 (Medium) with high confidentiality impact but no integrity or availability ...

CVE-2026-78515

CVE-2026-78515 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized, remote attacker to disclose information over a network. The attack requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 scores it 6.5 (Medium) with high confidentia...

CVE-2026-80091

Microsoft Office is affected by an information disclosure vulnerability caused by the use of an uninitialized resource . An unauthorized attacker can leverage this over a network to disclose information, though user interaction is required (CVSS: 6.5 MEDIUM , vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:...

CVE-2026-81390

CVE-2026-81390 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally . The attack requires user interaction (e.g., opening a crafted file) and no prior privileges. The CVSS 3.1 base score is 5.5 (Medium) with High con...

CVE-2026-69734

Microsoft Office Word is affected by an integer overflow or wraparound flaw that allows an unauthorized attacker to disclose information over a network . The flaw requires user interaction (opening a crafted document) but no prior authentication, carrying a CVSS 3.1 score of 6.5 (Medium) with hig...

CVE-2026-78520

Microsoft Office Outlook is affected by an out-of-bounds read vulnerability (CVE-2026-78520), disclosed on 2026-09-08. The NVD description states it allows an unauthorized attacker to execute code over a network, while the associated CVSS 3.1 score of 6.5 (MEDIUM) with impacts limited to high con...

CVE-2026-80087

A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network , per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) scoring it 6.5 MEDIUM . The CISA SSVC assessment rates exploitation as none , automatability as no , and technica...

CVE-2026-81400

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, no privileges required, and user interaction required, resulting in a high impact to confidentiality with no ...

CVE-2026-81393

CVE-2026-81393 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting a local attack vector , no privileges required , but user interaction required (e.g., opening a craf...

CVE-2026-78507

CVE-2026-78507 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior privileges. The CVSS 3.1 score is 8.8 (High) with ...

CVE-2026-80076

CVE-2026-80076 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized, remote attacker to disclose information over a network. The vulnerability is rated CVSS 3.1 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:N/UI:R, meaning exploitation requires user interaction but ...

CVE-2026-81396

CVE-2026-81396 is a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The vulnerability requires user interaction (e.g., opening a malicious file) but does not require prior privileges, with a CVSS 3.1 score of 7.8 (HIGH) . The pri...

CVE-2026-78526

CVE-2026-78526 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with an attack vector of network, low complexity, no privileges required, and user interaction requ...

CVE-2026-80080

CVE-2026-80080 is a double free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network with user interaction required. The CVSS 3.1 base score is 8.8 (HIGH) , reflecting high impact to confidentiality, integrity, and availabilit...

CVE-2026-81394

CVE-2026-81394 is an information disclosure vulnerability in Microsoft Office Excel . Exposure of sensitive system information to an unauthorized control sphere allows a local, unprivileged attacker to disclose information, provided the target user interacts with a crafted file. The CVSS 3.1 scor...

CVE-2026-81395

CVE-2026-81395 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, no privileges required, and user interaction required, resulting in high confident...

CVE-2026-81397

CVE-2026-81397 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The attack vector is local with low complexity and no privileges required, though user interaction is required (e.g., opening a crafted file). The CVSS 3.1 score ...

CVE-2026-77901

A null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (e.g., opening a crafted document) but no prior authentication. CISA rates the technical impact as total while noting exploitation is cur...

CVE-2026-78505

CVE-2026-78505 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code over a network. The vulnerability is rated CVSS 3.1 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , meaning exploitation requires user interaction but no prior...

CVE-2026-81386

Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized attacker to execute code locally after a user opens a crafted file. The CVSS 3.1 score is 7.8 (High) with a local attack vector, low complexity, no privileges required, and user interaction required, re...

CVE-2026-72974

Microsoft Office Excel is affected by a buffer over-read vulnerability that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N , meaning exploitation requires user interaction (likely opening ...

CVE-2026-78504

CVE-2026-78504 is a stack-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 3.1: 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user inter...

CVE-2026-78512

Microsoft Office Word is affected by a numeric truncation error that allows an unauthorized attacker to achieve remote code execution over a network. Exploitation requires user interaction (e.g., opening a crafted document) but no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) with full impac...

CVE-2026-72976

CVE-2026-72976 is an out-of-bounds read in Microsoft Office Word that allows an authorized attacker with low privileges to disclose information locally. Exploitation requires user interaction, with no integrity or availability impact. The CVSS 3.1 base score is 5.0 (MEDIUM) (AV:L/AC:L/PR:L/UI:R/S...

CVE-2026-80090

CVE-2026-80090 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network. The attack requires user interaction (e.g., opening a crafted document) but needs no prior privileges , yielding a CVSS 3.1 score of 6.5 (MED...

CVE-2026-80078

Microsoft Office is affected by an out-of-bounds read vulnerability that allows an unauthorized, network-based attacker to disclose information . The attack requires user interaction and no prior privileges, resulting in high confidentiality impact with a CVSS 3.1 score of 6.5 (MEDIUM) . CISA's S...

CVE-2026-80085

CVE-2026-80085 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a crafted document) but no prior authentication, yielding high impact to confidentialit...

CVE-2026-72977

CVE-2026-72977 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized, network-based attacker to disclose information . The attack requires user interaction (e.g., opening a crafted file) but no prior authentication. CVSS 3.1 base score is 6.5 (MEDIUM) w...

CVE-2026-69626

CVE-2026-69626 is a buffer over-read in Microsoft Office that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction but no prior privileges, and its primary impact is on confidentiality (high), with no effect on integrity or availabil...

CVE-2026-69671

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that user interaction is required (e.g., opening a crafted docum...

CVE-2026-69686

Microsoft Office Word is affected by a stack-based buffer overflow that allows an unauthorized, network-based attacker to achieve remote code execution . The CVSS 3.1 base score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that user interaction is required (e.g...

CVE-2026-72972

Microsoft Office Word is affected by a heap-based buffer overflow that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e.g., open...

CVE-2026-78514

CVE-2026-78514 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e....

CVE-2026-78521

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The attack requires user interaction (e.g., opening a malicious document) but no prior auth...

CVE-2026-69722

Microsoft Office Word is affected by a stack-based buffer overflow that enables an unauthorized attacker to achieve remote code execution over a network . The vulnerability requires user interaction (e.g., opening a crafted document) but needs no prior authentication. The CVSS 3.1 score is 8.8 (H...

CVE-2026-72938

CVE-2026-72938 is an information disclosure vulnerability in Microsoft Office PowerPoint caused by a type confusion flaw (accessing a resource using an incompatible type). An unauthorized attacker can exploit this over a network with low complexity and no privileges , though user interaction is r...

CVE-2026-78503

CVE-2026-78503 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The assigned CVSS 3.1 base score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interac...

CVE-2026-78506

Microsoft Office Word contains an improper null termination vulnerability that allows an unauthorized attacker to disclose information locally . The flaw requires user interaction and no special privileges, with a high confidentiality impact but no integrity or availability impact, rated CVSS 5.5...

CVE-2026-78511

CVE-2026-78511 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted document), with no prior privileges needed and low attack complexity. ...

CVE-2026-80088

CVE-2026-80088 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating that while user interaction is required...

CVE-2026-81387

CVE-2026-81387 is an information disclosure vulnerability in Microsoft Office Excel . It allows an unauthorized attacker with local access to expose sensitive system information, requiring user interaction and no prior privileges. The CVSS v3.1 score is 5.5 (MEDIUM) , with high confidentiality im...