CVE-2026-81958

Microsoft Office Excel is affected by a use of uninitialized resource flaw that allows an unauthorized, local attacker to disclose information. The vulnerability requires user interaction (e.g., opening a crafted file) and results in a high confidentiality impact with no integrity or availability...

CVE-2026-78502

An out-of-bounds read in Microsoft Office Word allows an unauthorized, remote attacker to disclose information over a network, provided the victim opens a crafted document (user interaction required). The CVSS 3.1 base score is 6.5 (MEDIUM) with high confidentiality impact but no integrity or ava...

CVE-2026-78503

CVE-2026-78503 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The assigned CVSS 3.1 base score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interac...

CVE-2026-70291

A heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a CRITICAL severity score of 9.8 . To exploit these types of vulnerabilities, an attacker typically tricks a victim into opening a ...

CVE-2026-88178

A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to achieve Remote Code Execution over a network. The vulnerability has a CRITICAL severity with a CVSS score of 9.8 . Microsoft has released updates to address this issue; users are encouraged to install...

CVE-2026-69556

Microsoft Office Word is affected by a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior authentication, as reflected in the CVSS 3.1 base score of 8...

CVE-2026-88156

A stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed as a critical issue with a CVSS 3.1 base score of 9.8 . Exploitation of similar Office vulnerabilities typically requires a vic...

CVE-2026-77911

CVE-2026-77911 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The flaw requires user interaction and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availabilit...

CVE-2026-97745

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released updates to address this and other related vulnerabilities across various Office products...

CVE-2026-88196

A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability affects multiple products including Word , Excel , Access , Outlook , Visio , SharePoint , and PowerPoint , as well as subcomponents li...

CVE-2026-100210

A heap-based buffer overflow exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve arbitrary code execution over a network. This vulnerability is rated with a High severity (CVSS 3.1: 8.8). Microsoft has released official fixes to address this issue; users are r...

CVE-2026-70269

A heap-based buffer overflow vulnerability in Microsoft Office Word allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is associated with CWE-122 and CWE-190 . Microsoft has released official updates to address this flaw. Users are recommended...

CVE-2026-88186

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). Microsoft has released updates to addre...

CVE-2026-97017

A use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 8.8 (High) . To mitigate this risk, Microsoft has released updates; users are encouraged to install the latest secur...

CVE-2026-70254

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation of this vulnerability requires the victim to be tricked into opening a malicious file or clicking a malicious link. Microsoft has released updates to address ...

CVE-2026-97001

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution locally. The vulnerability is confirmed by multiple sources, including NVD and Microsoft security advisories. To successfully exploit this, an attacker must trick the victim into...

CVE-2026-97004

Microsoft Office Excel is affected by a heap-based buffer overflow (CWE-122) and an integer underflow (CWE-191) that allows an unauthorized attacker to execute arbitrary code over a network. Exploitation requires the victim to open a malicious file or click a malicious link. Microsoft has release...

CVE-2026-97010

A use after free vulnerability exists in Microsoft Office Excel , which may allow an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability carries a CVSS 3.1 score of 8.8 (High) . Microsoft has released updates to address this issue; users are encouraged to i...

CVE-2026-100209

A use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability has a CVSS v3.1 score of 8.8 (High) . While specific technical root causes or internal file paths are not provided, the vulnerability is c...

CVE-2026-70220

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution locally. To successfully exploit this vulnerability, an attacker must trick the victim into opening a malicious file or clicking a malicious link. Microsoft has released updat...

CVE-2026-96997

A Use after free vulnerability in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally . The issue impacts the OneNote component and is assigned a CVSS score of 7.8 (High) . Microsoft has released security updates to address this vulnerability; users are recommende...

CVE-2026-97003

A heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability impacts the Excel component and can lead to remote code execution. Microsoft has released updates to address this issue; users are enco...

CVE-2026-97007

A heap-based buffer overflow exists in Microsoft Office Excel , potentially allowing an unauthorized attacker to execute arbitrary code over a network. The vulnerability is rated as HIGH severity (CVSS 3.1: 8.8) and requires user interaction to exploit. Microsoft has released official fixes to ad...

CVE-2026-97773

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability's severity is rated as High (CVSS 3.1: 8.8) due to its potential for significant confidentiality, integrit...

CVE-2026-105599

A heap-based buffer overflow exists in Microsoft Office PowerPoint , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with a HIGH severity score of 7.5 . Microsoft has released updates to address this vulnerability, and users are encourag...

CVE-2026-105715

A vulnerability in Microsoft Office Word involves an integer overflow or wraparound , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact of this vulnerability includes potential arbitrary code execution within the victim's context. Microsoft has...

CVE-2026-88150

A use of uninitialized resource vulnerability in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this issue; users are recommended to in...

CVE-2026-96995

A stack-based buffer overflow exists in Microsoft Office Word , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-121 (Stack-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Microsoft has released updates to address ...

CVE-2026-97738

A Use after free vulnerability exists in Microsoft Office Excel , allowing an unauthorized attacker to execute arbitrary code over a network. This vulnerability carries a HIGH base severity score of 8.8. Microsoft has released security updates to address this issue. Users are recommended to insta...

CVE-2026-97739

A vulnerability exists in Microsoft Office Excel due to an Integer underflow (wrap or wraparound) . This flaw allows an unauthorized attacker to achieve Remote Code Execution over a network. Microsoft has released updates to address this issue; users are advised to install the latest security pat...

CVE-2026-97740

A vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive system information over a network. The issue is characterized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). An attacker can exploit this to gain access to ...

CVE-2026-97750

A stack-based buffer overflow vulnerability exists in Microsoft Office Excel , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity (CVSS 8.8) and requires user interaction to exploit. Microsoft has released updates to ...

CVE-2026-97751

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact is rated as HIGH with a CVSSv3.1 score of 8.8 . Microsoft has released updates to address this vulnerability; users ...

CVE-2026-97753

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability involves a heap-based buffer overflow and an integer overflow/wraparound (CWE-122, CWE-190). Exploitation requires user interaction , suc...

CVE-2026-97756

A heap-based buffer overflow exists in Microsoft Office Excel , which allows an unauthorized attacker to execute code over a network. Exploitation typically requires the victim to open a malicious file or click a malicious link. Microsoft has released updates to address this vulnerability; users ...

CVE-2026-97759

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The impact is rated as High (CVSS 8.8), potentially allowing for high confidentiality, integrity, and availability impacts. Microsoft has released official upd...

CVE-2026-97771

A use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. Microsoft has released updates to address this vulnerability; users are recommended to install the latest security updates. Exploitation details and specific p...

CVE-2026-97775

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability, identified as CVE-2026-97775 , carries a CVSS v3.1 score of 8.8 (High) . Microsoft has released official updates to address this and othe...

CVE-2026-97778

A vulnerability exists in Microsoft Office Excel caused by an integer overflow or wraparound . This flaw allows an unauthorized attacker to achieve remote code execution over a network. While the technical root cause is an integer overflow, the specific component or file is not identified in the ...

CVE-2026-97780

A heap-based buffer overflow exists in Microsoft Office Excel that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a HIGH severity rating (CVSS 3.1 score of 8.8) and requires user interaction to exploit. Microsoft has released updates to addr...

CVE-2026-70215

A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 score of 8.8 and carries a high severity for confidentiality, integrity, and availability. Exploitation typically requires a victim to ope...

CVE-2026-70287

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability carries a CVSS v3.1 score of 8.8 (High) , indicating that an attacker could exploit this to execute code with high impact on confidentiality,...

CVE-2026-70302

A heap-based buffer overflow vulnerability in Microsoft Office Word allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS v3.1 base score of 8.8 (High) . An attacker could potentially exploit this to perform remote code execution, though specific e...

CVE-2026-77902

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation of this vulnerability requires the victim to open a malicious file or click a malicious link. Microsoft has released updates to address this and other vulnerabilitie...

CVE-2026-88202

A heap-based buffer overflow exists in Microsoft Office Word , potentially allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a HIGH severity (CVSS 3.1 score of 8.8). To successfully exploit this, an attacker may require the victim t...

CVE-2026-88207

A heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability requires user interaction, as an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft has...

CVE-2026-97005

An out-of-bounds read vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. The vulnerability results in access to sensitive data with a CVSSv3.1 base score of 5.5 . Microsoft has released updates to address this issue, and users are advised...

CVE-2026-97008

A buffer underwrite (buffer underflow) vulnerability exists in Microsoft Office Excel . This flaw allows an unauthorized attacker to execute arbitrary code over a network. Microsoft has released security updates to address this vulnerability; users are recommended to install the latest patches vi...

CVE-2026-97767

A double free vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact is rated as HIGH with a CVSS 3.1 score of 8.8 . Microsoft has released updates to address this vulnerability; users are encouraged ...

CVE-2026-100211

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. This flaw results in Arbitrary code execution and has a CVSS v3.1 base score of 8.8 . Microsoft has released updates to address this vulnerability; users are recommended to ins...