CVE-2026-81958

Microsoft Office Excel is affected by a use of uninitialized resource flaw that allows an unauthorized, local attacker to disclose information. The vulnerability requires user interaction (e.g., opening a crafted file) and results in a high confidentiality impact with no integrity or availability...

CVE-2026-69556

Microsoft Office Word is affected by a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior authentication, as reflected in the CVSS 3.1 base score of 8...

CVE-2026-69719

CVE-2026-69719 is a buffer over-read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) , with a network attack vector, low complexity, no privileges required, and user interaction required , resu...

CVE-2026-78502

An out-of-bounds read in Microsoft Office Word allows an unauthorized, remote attacker to disclose information over a network, provided the victim opens a crafted document (user interaction required). The CVSS 3.1 base score is 6.5 (MEDIUM) with high confidentiality impact but no integrity or ava...

CVE-2026-77911

CVE-2026-77911 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The flaw requires user interaction and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availabilit...