CVE-2021-38646

CVE-2021-38646 is a Microsoft Office Access Connectivity Engine remote code execution vulnerability. The Nessus plugin confirms it affects Office products via the Access connectivity engine and ties remediation to September 2021 Office security updates (e.g., KB5001958 for Office 2013 and KB50019...

CVE-2024-21413

Summary of CVE-2024-21413 (Microsoft Outlook / Moniker Link): A vulnerability in Outlook where crafted Moniker Link URLs (often via file:///UNC paths) can trigger an automatic SMB access, potentially leaking the user’s NTLM hash to an attacker. Multiple PoCs on GitHub demonstrate delivering malic...

CVE-2026-45456

CVE-2026-45456 affects Microsoft Office apps (notably Outlook and Word) and is caused by a resource access type confusion that can lead to local code execution. The vulnerability allows an authenticated, local attacker to run arbitrary code without user interaction, with high impact on confidenti...

CVE-2026-45463

CVE-2026-45463 describes a heap-based buffer overflow in Microsoft Office that allows an attacker with local access to execute code on the affected system. The sources identify Microsoft Office and classify the flaw as a heap-based overflow with high impact (CVSSv3.1: 8.4, LOCAL access, no user i...

CVE-2026-65661

Microsoft Office is affected by CVE-2026-65661 due to a heap-based buffer overflow that allows an attacker with local access to execute code on a vulnerable system. The CVSS 3.1 vector indicates a Local attack with user interaction required and a High impact on confidentiality, integrity, and ava...

CVE-2026-44819

CVE-2026-44819 affects Microsoft Office and is described as a heap-based buffer overflow that allows a local attacker to execute code. The vulnerability is characterized by a LOCAL attack vector, LOW attack complexity, and requires user interaction, with a high impact on confidentiality, integrit...

CVE-2026-63515

CVE-2026-63515 concerns an out-of-bounds read in Microsoft Office that enables local code execution when exploited by an attacker who must have some user interaction. The affected product is Microsoft Office; the root cause is an out-of-bounds read in the code path used during document handling. ...

CVE-2026-47290

CVE-2026-47290 is a Microsoft Office remote-code-execution vulnerability described as a use-after-free in Office components. Affected software includes Microsoft Office family (Word, Excel, PowerPoint, SharePoint) with the Office ecosystem cited in NCsc advisories and CIRCL sighting logs. The CVS...

CVE-2026-45474

The documents confirm CVE-2026-45474 is a Microsoft Office vulnerability described as a heap-based buffer overflow that allows an unauthenticated/unauthorized attacker to execute code locally on affected systems. Affected product is Microsoft Office, with the root cause identified as a heap-based...

CVE-2026-55035

CVE-2026-55035 is an information-disclosure vulnerability described as an out-of-bounds read in Microsoft Office that allows a locally authenticated attacker to disclose information. Connected sources confirm this affects multiple Office components (Word, Excel, PowerPoint, SharePoint, etc.) and ...

CVE-2026-55022

CVE-2026-55022 is a type-confusion vulnerability in Microsoft Office that could allow local code execution when a user opens a specially crafted file or clicks a malicious link in Office applications (Word/Excel/PowerPoint/SharePoint are affected as listed by public advisories). Connected sources...

CVE-2026-45485

CVE-2026-45485: In Microsoft Office, an out-of-bounds read leads to local information disclosure. Documents confirm the vulnerability and its impact (local disclosure) with low severity (CVSS 3.1:3.3). Exploitation details and affected component/version specifics are not provided in the supplied ...

CVE-2026-45472

CVE-2026-45472 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. The connected sources (NVD, CVE listing) corroborate a local-execution impact due to a heap overflow in Office components. No explicit root-cause details beyond the hea...

CVE-2026-63513

CVE-2026-63513 affects Microsoft Office (Graphics Component) via a heap-based buffer overflow that enables local code execution. The CVE is described as a Heap-based buffer overflow in Microsoft Office allowing an unauthorized attacker to execute code locally. CVSS 3.1 indicates LOCAL attack vect...

CVE-2026-55121

CVE-2026-55121 corresponds to an out-of-bounds read in Microsoft Office that enables an unauthenticated or authorized local attacker to disclose information. The public descriptions across NVD/MSRC and EUVD notes indicate the vulnerability affects Microsoft Office components and results in local ...

CVE-2026-55140

CVE-2026-55140 is a Microsoft Office remote code execution vulnerability caused by a heap-based buffer overflow in Office components. An unauthorized attacker could exploit this locally to run arbitrary code on a vulnerable system, as described in multiple security sources. Connected documents co...

CVE-2026-56192

The CVE-2026-56192 entry describes a local, information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read. Affected product: Microsoft Office suite (Office components) per multiple connected sources. Root cause and exact vulnerable component are not fully detailed in th...

CVE-2026-45645

The provided data identify CVE-2026-45645 as a heap-based buffer overflow affecting Microsoft Office, enabling local code execution. Details show an exploit would require user interaction and has a local attack surface (attackVector: LOCAL, userInteraction: REQUIRED) with high impacts on confiden...

CVE-2026-50665

CVE-2026-50665 is described as an information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read, enabling a local attacker to disclose data. Public sources in the connected set reiterate the issue as a Microsoft Office vulnerability with potential to access sensitive in...

CVE-2026-55049

CVE-2026-55049 is a heap-based buffer overflow in Microsoft Office that could let an attacker execute code locally. Public artifacts tie it to Office components (Word/Excel/PowerPoint/SharePoint) with high impact (CVSS 3.1: 7.8, local, user-interaction required). Connected sources confirm Office ...

CVE-2026-45461

CVE-2026-45461 describes a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. Documents confirm the vulnerability exists in Microsoft Office and indicate a local attack vector with high impact (C: HIGH, I: HIGH, A: HIGH) and a base score o...

CVE-2026-50314

CVE-2026-50314 is a Microsoft Office use-after-free vulnerability that enables a local attacker to execute arbitrary code by convincing a user to open a malicious document or link (Office components implicated include Word/Excel/PowerPoint/SharePoint per provided sources). The issue is described ...

CVE-2026-44824

CVE-2026-44824 affects Microsoft Office and is a heap-based buffer overflow that enables local code execution. The issue requires user interaction and has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, no privileges required, and high impact on confidentiality, integrity, and avai...

CVE-2026-64909

Microsoft Office is affected by CVE-2026-649909 due to an integer underflow, enabling local code execution. The root cause is a wrap/wraparound flaw in an Office component, with the impact described as local RCE. No specific affected versions or patches are provided in the supplied documents. Exp...

CVE-2026-64903

CVE-2026-64903 : Affected product is Microsoft Office. The vulnerability is an integer overflow/wraparound in Office components that allows an unauthorized attacker to execute code locally on a vulnerable host (attack vector: LOCAL; user interaction required; impact: confidentiality, integrity, a...

CVE-2026-63526

CVE-2026-63526 is a stack-based buffer overflow in the Microsoft Office Graphics Component that can allow an attacker with local access to execute code on a vulnerable system. Affected software is Microsoft Office (Graphics Component). The underlying issue is a buffer overflow in the component’s ...

CVE-2026-55129

CVE-2026-55129 is a Microsoft Office remote code execution vulnerability described as a heap-based buffer overflow that could allow an attacker to run code locally. Available sources identify the affected surface as Microsoft Office components, with Office-based exploitation involving opening a m...

CVE-2026-55045

CVE-2026-55045 is an Office remote code execution vulnerability described as an out-of-bounds read in Microsoft Office that could enable a local attacker to execute code. Connected sources tie this CVE to Microsoft Office components (Word/PowerPoint/SharePoint) with local-exploit prerequisites an...

CVE-2026-44821

The CVE-2026-44821 entry concerns an out-of-bounds read in Microsoft Office that could allow a local attacker to disclose information. Affected software is Microsoft Office; the vulnerability is a read boundary issue in a component/file used by Office, enabling local information disclosure. The p...

CVE-2026-55139

Technical details for CVE-2026-55139 are not publicly available in the provided documents. Available sources mention exposure in Microsoft Office but do not specify affected products, versions, root cause, or remediation. Monitor for official updates.

CVE-2026-63533

Microsoft Office is affected by CVE-2026-63533, described as a heap-based buffer overflow that allows an unauthorized attacker to execute code locally. The available sources (NVD and CVE records) confirm a local exploit scenario with a base CVSS v3.1 score of 7.8 (HIGH) and impact to confidential...

CVE-2026-50467

CVE-2026-50467 is a use-after-free vulnerability in Microsoft Office that can allow an attacker to execute code locally. The linked sources (Microsoft and third-party advisories) confirm Office as the affected product and describe the underlying issue as a use-after-free leading to arbitrary code...

CVE-2026-50301

CVE-2026-50301 is a heap-based buffer overflow in Microsoft Office that allows local code execution. The provided documents confirm the affected product (Microsoft Office) and the impact (remote/local execution via heap overflow) but do not include detailed exploit steps or patch/fix information ...

CVE-2026-55125

CVE-2026-55125 is a Microsoft Office heap-based buffer overflow that enables local code execution. The NVD entry reports a CVSS v3.1 base score of 7.8 (LOCAL, HIGH impact across confidentiality, integrity, and availability) with user interaction required. Connected sources corroborate Office-wide...

CVE-2026-63517

CVE-2026-63517 describes an out-of-bounds read in the Microsoft Office Graphics Component that allows a local attacker to disclose information. The affected software is Microsoft Office (Graphics Component). Root cause: out-of-bounds read. Impact: confidentiality impact High; attacker needs local...

CVE-2026-45475

This CVE (CVE-2026-45475) concerns a heap-based buffer overflow in Microsoft Office. The description indicates an unauthorized attacker could achieve local code execution, with user interaction required and high impact on confidentiality, integrity, and availability. The provided documents do not...

CVE-2026-55026

CVE-2026-55026 is an Office-related vulnerability caused by an integer overflow/wraparound in Microsoft Office that enables local information disclosure. Affected: Microsoft Office components; root cause per the CVE entry is integer overflow. Impact per NVD: Confidentiality impact HIGH, no integr...

CVE-2026-55028

CVE-2026-55028 is an Office vulnerability described as an out-of-bounds read in Microsoft Office that allows an unauthorized attacker to disclose information locally. The CVE is tied to Office components (Word/Excel/PowerPoint/SharePoint) and is listed with a local attack vector, requiring user i...

CVE-2026-56195

Technical details about CVE-2026-56195 are not publicly available in the provided documents. Monitor for updates from Microsoft and third-party advisories.

CVE-2026-55017

Mode C: CVE-2026-55017 is a heap-based buffer overflow affecting Microsoft Office, enabling a local attacker to execute code. The available connected documents confirm this vulnerability within Microsoft Office products (Office components cited in the NCSC advisory and multiple CVE trackers). Roo...

CVE-2026-55042

Technical details about CVE-2026-55042 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-56193

CVE-2026-56193 describes an out-of-bounds read in Microsoft Office that allows a local attacker to disclose information. The available records indicate a high-severity impact (Confidentiality and Availability) with local access and user interaction required, but no explicit details on affected Of...

CVE-2026-64899

CVE-2026-64899 concerns a local vulnerability in Microsoft Office causing an out-of-bounds read that enables an unauthenticated or authorized attacker to disclose information locally. The connected documents confirm the affected product family (Microsoft Office) and the impact (information disclo...

CVE-2026-68797

CVE-2026-68797 describes an out-of-bounds read in Microsoft Office Excel that enables a local attacker to disclose information. The sources consistently identify Excel as the affected product; no specific versions, modules, or root-cause details beyond the general memory read bound violation are ...

CVE-2026-55057

Microsoft Office vulnerability CVE-2026-55057 is an information disclosure caused by an integer overflow/wraparound in Office components. The issue allows a local attacker to disclose information. Microsoft has published a July 2026 security update (KB5002887) addressing this vulnerability; apply...

CVE-2026-63529

CVE-2026-63529 affects Microsoft Office. The documented issue is an out-of-bounds read that enables a local attacker to disclose information. The available sources do not provide specific impacted products, versions, or vulnerable components beyond the general Microsoft Office reference, nor deta...

CVE-2026-55027

CVE-2026-55027 is a Microsoft Office information-disclosure vulnerability described as an out-of-bounds read that can disclose local information. The CVE entry notes a local attacker with no privileges can trigger the issue, requiring user interaction (per CVSS: AV:L/AC:L/PR:N/UI:R). Connected so...

CVE-2026-63532

CVE-2026-63532 affects Microsoft Office and is caused by an integer overflow/wraparound in a component of Office, enabling local code execution by an unauthenticated user with at least user interaction. The available sources describe the vulnerability class and impact but do not provide specific ...

CVE-2026-70317

This CVE (CVE-2026-70317) concerns Microsoft Office and is caused by the use of an uninitialized resource, enabling an attacker to disclose information locally. The NVD/CVE records indicate a local attack vector with low complexity and no privileges required, but user interaction is required. The...

CVE-2026-55018

CVE-2026-55018 is a use-after-free in Microsoft Office that enables local code execution. The vulnerability is listed among Microsoft Office family issues and is part of July 2026 updates; exploitation requires the user to open a malicious Office file or link (SharePoint variants may not require ...