347 matches found
CVE-2026-70301
A heap-based buffer overflow exists in Microsoft Office Word , which could allow an unauthorized attacker to execute arbitrary code over a network. To successfully exploit this vulnerability, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft has...
CVE-2026-88167
A buffer over-read vulnerability exists in Microsoft Office Word , which could allow an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-126 and has been addressed by Microsoft in a released update. Details regarding specific affected versions...
CVE-2026-97747
A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has been addressed by Microsoft with the release of official updates. Users are recommended to install these updates to mitigate the risk. Exploitat...
CVE-2026-97768
A heap-based buffer overflow exists in Microsoft Office Excel , which could allow an unauthorized attacker to execute code over a network. The vulnerability has a CVSS v3.1 score of 8.8 and requires user interaction. Microsoft has released updates to address this vulnerability, and users are enco...
CVE-2026-97769
A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which can allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-20 (Improper Input Validation). Practical consequences include ...
CVE-2026-105718
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. This flaw is associated with CWE-125 and CWE-20 , indicating issues with memory handling and input validation. The vulnerability has a High severity rating (CVSS 3.1: 8.8)...
CVE-2026-83891
A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability stems from improper input validation and can result in arbitrary code execution within the victim's context. To successfully exploit this, an attacker...
CVE-2026-88154
An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose sensitive information over a network. The issue is categorized under CWE-125 and has a CVSS 3.1 score of 6.5 (Medium) . Microsoft has released official updates to address ...
CVE-2026-88169
A vulnerability exists in Microsoft Office Word involving an out-of-bounds read , which allows an unauthorized attacker to disclose information over a network. The impact is categorized as Access to sensitive data . Microsoft has released updates to address this vulnerability, and users are encou...
CVE-2026-88175
An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose information over a network. The impact is categorized as access to sensitive data . Microsoft has released security updates to address this vulnerability; users are encour...
CVE-2026-88197
A heap-based buffer overflow exists in Microsoft Office , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability affects several products, including Word , Excel , Access , Outlook , Visio , SharePoint , and PowerPoint . To successfully exploit the...
CVE-2026-97742
A stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) . Microsoft has released updates to address this vulnerability, and users are encouraged to install them to mitigate ris...
CVE-2026-97743
A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 6.5. Microsoft has released updates to address this issue; users are recommended to install the latest secu...
CVE-2026-97746
An integer underflow (wrap or wraparound) vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a HIGH severity rating (CVSS 8.8). To mitigate this risk, users are encouraged to install the official security ...
CVE-2026-97748
A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve arbitrary code execution over a network. To successfully exploit this vulnerability, an attacker must typically trick a victim into opening a malicious file or click...
CVE-2026-97758
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High Severity), which indicates a high impact on confidentiality, integrity, and availability with low attack comp...
CVE-2026-97761
A stack-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability impacts the software's ability to handle data safely, potentially leading to a full system compromise. Micro...
CVE-2026-97772
A double free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The issue is classified with a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this vulnerability; users are advised to install ...
CVE-2026-70281
A vulnerability exists in Microsoft Office Outlook involving an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to disclose sensitive information over a network. The impact is classified as high, with a CVSSv3.1 base score of 7.5 . Microsoft has released official updates t...
CVE-2026-88144
A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute arbitrary code over a network. This flaw could lead to a compromise of the victim's context, including the ability to execute code or access sensitive information. To successfully exploit this...
CVE-2026-88184
An out-of-bounds read vulnerability exists in Microsoft Office Excel , allowing an unauthorized attacker to disclose information over a network. The vulnerability results in an access to sensitive data impact with a CVSS 3.1 base score of 6.5. Microsoft has released updates to address this issue;...
CVE-2026-97744
A vulnerability exists in Microsoft Office PowerPoint due to an out-of-bounds read condition. This flaw allows an unauthorized attacker to disclose information locally . Microsoft has released updates to address this vulnerability, and users are advised to install them. Exploitation details are n...
CVE-2026-97757
A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has been addressed by Microsoft in recent security updates. To mitigate this risk, users are recommended to i...
CVE-2026-97770
A stack-based buffer overflow exists in Microsoft Office Excel , which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a HIGH base severity score of 8.8 . Microsoft has released updates to address this vulnerability; users are recommended to in...
CVE-2026-97777
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability requires user interaction , specifically tricking a victim into opening a malicious file or clicking a malicious link. Microsoft has released updates ...
CVE-2026-88145
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. This vulnerability is caused by underlying issues in how the application handles memory, potentially leading to a complete compromise of the victim's conte...
CVE-2026-88183
An out-of-bounds read vulnerability exists in Microsoft Office PowerPoint , which allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS v3.1 score of 6.5 (Medium) . Impacted functionality includes data disclosure within...
CVE-2026-88185
A heap-based buffer overflow exists in Microsoft Office Word , which may allow an unauthorized attacker to execute code over a network. This vulnerability is associated with CWE-122 and has a CVSS v3.1 score of 8.1 (High). Microsoft has released updates to address this vulnerability. Affected sys...
CVE-2026-88192
An out-of-bounds read vulnerability exists in Microsoft Office Excel , which allows an unauthorized attacker to disclose sensitive information over a network. The vulnerability is confirmed by the NCSC and Microsoft as a security risk. Remediation is available via official Microsoft updates ; use...
CVE-2026-88210
A security feature bypass vulnerability exists in Microsoft Office Word due to the software's reliance on untrusted inputs in a security decision. An unauthorized attacker can exploit this flaw locally to bypass specific security protections. The impact of this vulnerability is classified as a by...
CVE-2026-97011
A use of uninitialized resource vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. This flaw is categorized under CWE-908 (Use of Uninitialized Resource) and CWE-763 (Release of Invalid Pointer or Reference). The impact of successful exploitati...
CVE-2026-97754
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network . This vulnerability enables remote code execution, which can lead to a denial-of-service, privilege escalation, or unauthorized access to sensitive information. To successfully e...
CVE-2026-97763
A heap-based buffer overflow exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker would typically need to trick a victim into opening a malicious file or clicking a ma...
CVE-2026-97776
A heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft h...
CVE-2026-100212
A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. This flaw can lead to high impact consequences regarding confidentiality, integrity, and availability. Microsoft has released updates to address this vulnerability; u...
CVE-2026-70263
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose sensitive information over a network. This vulnerability affects the Microsoft Office Word application, where the flaw could lead to access to sensitive data . Microsoft has released updates t...
CVE-2026-70268
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker must typically trick a victim into opening a malicious file or clicking a malicious link. Microsoft has re...
CVE-2026-97741
A heap-based buffer overflow exists in Microsoft Office Excel , which allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-193 (Off-by-one Error). An attacker could exploit this to exe...
CVE-2026-97752
A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution over a network. The vulnerability has been addressed by Microsoft in a released update; users are recommended to install the latest security updates from the official MSRC por...
CVE-2026-97760
Microsoft Office Excel is vulnerable to an out-of-bounds read vulnerability (CWE-125). An unauthorized attacker can exploit this flaw over a network to disclose sensitive information from the victim's context. The vulnerability requires user interaction, such as opening a malicious file or clicki...
CVE-2026-97765
A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this issue, and users are encouraged to install t...
CVE-2026-97766
A Heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The severity is rated as High with a CVSS 3.1 score of 8.8. Microsoft has released updates to address this vulnerability; users are recommended to install...
CVE-2026-70206
An out-of-bounds read vulnerability exists in Microsoft Office Word , which may allow an unauthorized attacker to disclose information over a network. This vulnerability is categorized as a security risk that could grant access to sensitive data. Microsoft has released official updates to address...
CVE-2026-97755
An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a High severity (CVSS 3.1 score of 8.8 ) and requires user interaction, such as the victim opening a malicious file or clicking a malicious...
CVE-2026-97762
An out-of-bounds write vulnerability exists in Microsoft Office Excel , which may allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) and requires user interaction to exploit. Microsoft has released updates to address ...
CVE-2026-97779
A vulnerability exists in Microsoft Office Excel involving an out-of-bounds read that allows an unauthorized attacker to disclose information over a network. The impact is classified as high confidentiality with a CVSS 3.1 score of 6.5. Microsoft has released updates to address this vulnerability...
CVE-2026-102858
A heap-based buffer overflow exists in Microsoft Office OneNote , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 . While the impact is high, user interaction is required for exploitation. Official remediation ...