CVE-2026-55028

CVE-2026-55028 is an Office vulnerability described as an out-of-bounds read in Microsoft Office that allows an unauthorized attacker to disclose information locally. The CVE is tied to Office components (Word/Excel/PowerPoint/SharePoint) and is listed with a local attack vector, requiring user i...

CVE-2026-55139

Technical details for CVE-2026-55139 are not publicly available in the provided documents. Available sources mention exposure in Microsoft Office but do not specify affected products, versions, root cause, or remediation. Monitor for official updates.

CVE-2026-56195

Technical details about CVE-2026-56195 are not publicly available in the provided documents. Monitor for updates from Microsoft and third-party advisories.

CVE-2026-81948

Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized local attacker to execute arbitrary code. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges, and results in high impact to confidentiality, integrity, an...

CVE-2026-81957

CVE-2026-81957 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized, local attacker to execute code on the system. The attack requires user interaction (e.g., opening a crafted file) but no prior privileges. Microsoft rates the CVSS 3.1 score at 7.8 (HIGH) ...

CVE-2026-69285

A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning it requires user interaction but no prior authentication....

CVE-2026-81953

Microsoft Office Excel is affected by a stack-based buffer overflow that allows an unauthorized attacker to execute code locally. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, no privileges required, but user interaction required (the victim must open a crafted file...

CVE-2026-81950

CVE-2026-81950 is a double free vulnerability in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity, no privileges required, and user interaction required, resulting in high i...

CVE-2026-81959

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally when a user interacts with a crafted file. The CVSS 3.1 score is 7.8 (HIGH) , with a local attack vector, low complexity, no privileges required, and user interaction required, resulting...

CVE-2026-63529

CVE-2026-63529 affects Microsoft Office. The documented issue is an out-of-bounds read that enables a local attacker to disclose information. The available sources do not provide specific impacted products, versions, or vulnerable components beyond the general Microsoft Office reference, nor deta...

CVE-2026-55056

CVE-2026-55056 is a heap-based buffer overflow in Microsoft Office that enables local code execution via parsing/processing of Office documents. Affected: Microsoft Office and related components. Root cause: heap-based overflow. Impact: unauthorized local code execution with high severity. Status...

CVE-2026-78524

CVE-2026-78524 is an out-of-bounds write vulnerability in Microsoft Office that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R, meaning exploitation requires user interaction but no prior authen...

CVE-2026-81949

CVE-2026-81949 is a local code execution vulnerability in Microsoft Office Excel caused by an integer overflow or wraparound in Excel. An unauthorized attacker who convinces a user to open a crafted file can execute arbitrary code on the target system. The CVSS v3.1 score is 7.8 (HIGH) , reflecti...

CVE-2026-81952

CVE-2026-81952 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network . The CVSS 3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e.g., op...

CVE-2026-81951

CVE-2026-81951 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity, no privileges required, and user interaction required (i.e., a vict...

CVE-2026-55023

CVE-2026-55023 is a Microsoft Office information-disclosure vulnerability described as an out-of-bounds read that could allow a local attacker to disclose information. CVSS v3.1 base score 5.5 (MEDIUM): attack vector LOCAL, attack complexity LOW, privileges required NONE, user interaction REQUIRE...

CVE-2026-85875

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) , with a local attack vector, low complexity, no privileges required, and user interaction required. Impact is limited to confidentiality...

CVE-2026-62804

CVE-2026-62804 is an external control of file name or path vulnerability in Microsoft Office Word that allows an unauthorized attacker to execute code locally. The flaw requires user interaction (e.g., opening a crafted file) and no prior privileges, with high impact to confidentiality, integrity...

CVE-2026-78518

CVE-2026-78518 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, no privileges required, but user interaction requi...

CVE-2026-69529

CVE-2026-69529 is a heap-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The attack requires user interaction (e.g., opening a crafted file) but needs no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) , with impacts of high...

CVE-2026-81399

CVE-2026-81399 is a buffer over-read vulnerability in Microsoft Office Excel that allows a local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with the vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interaction (e.g., opening a crafted file)...

CVE-2026-81389

CVE-2026-81389 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The vulnerability requires user interaction and has a high attack complexity , but no prior privileges are needed. The CVSS 3.1 score is 7.0 (HIGH) with full impa...

CVE-2026-81954

CVE-2026-81954 is a use-after-free vulnerability in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The attack requires user interaction and no prior privileges, with a CVSS 3.1 score of 7.8 (HIGH) , reflecting full impact on confidentiality, integrity, and a...

CVE-2026-81388

CVE-2026-81388 is a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The attack requires user interaction (e.g., opening a crafted file) and no prior privileges. The CVSS 3.1 score is 7.8 (HIGH) , with high impact to confidentiali...

CVE-2026-69739

CVE-2026-69739 is an out-of-bounds read in Microsoft Office that allows an unauthorized attacker to disclose information over a network . NVD assigns a CVSS 3.1 score of 7.5 (HIGH) with no user interaction required, while Microsoft's CNA assessment rates it 6.5 (MEDIUM) with user interaction requ...

CVE-2026-81947

Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized attacker to execute code locally (CVSS v3.1 score 7.8 HIGH ). The attack requires user interaction (e.g., opening a malicious file) and no prior privileges. Impact spans confidentiality, integrity, and ...

CVE-2026-69778

CVE-2026-69778 is a heap-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The CVSS v3.1 score is 8.8 (HIGH) with a network vector, low complexity, no required privileges, but user interaction required . CISA's SSVC assessment in...

CVE-2026-69442

CVE-2026-69442 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized, remote attacker to execute code over a network, requiring user interaction. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, and no privileges required, but user interac...

CVE-2026-81390

CVE-2026-81390 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally . The attack requires user interaction (e.g., opening a crafted file) and no prior privileges. The CVSS 3.1 base score is 5.5 (Medium) with High con...

CVE-2026-80089

CVE-2026-80089 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a network vector, low attack complexity, no privileges required, and user interaction required, resultin...

CVE-2026-80087

A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network , per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) scoring it 6.5 MEDIUM . The CISA SSVC assessment rates exploitation as none , automatability as no , and technica...

CVE-2026-80091

Microsoft Office is affected by an information disclosure vulnerability caused by the use of an uninitialized resource . An unauthorized attacker can leverage this over a network to disclose information, though user interaction is required (CVSS: 6.5 MEDIUM , vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:...

CVE-2026-81956

CVE-2026-81956 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized attacker to execute code locally . The attack requires user interaction (e.g., opening a malicious file) and needs no prior privileges. The assigned CVSS 3.1 score is 7.8 (HIGH) with high impact to confi...

CVE-2026-78505

CVE-2026-78505 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code over a network. The vulnerability is rated CVSS 3.1 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , meaning exploitation requires user interaction but no prior...

CVE-2026-78515

CVE-2026-78515 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized, remote attacker to disclose information over a network. The attack requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 scores it 6.5 (Medium) with high confidentia...

CVE-2026-81391

CVE-2026-81391 is an information disclosure vulnerability in Microsoft Office Excel caused by a use of uninitialized resource . An unauthorized local attacker with user interaction can disclose information, rated CVSS 5.5 (Medium) with high confidentiality impact but no integrity or availability ...

CVE-2026-81398

CVE-2026-81398 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning a local attack with low complexity requires user interaction (e.g....

CVE-2026-81960

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve local code execution . The vulnerability requires user interaction (e.g., opening a malicious file) but no prior privileges. The assigned CVSS 3.1 score is 7.8 (HIGH) with full impact to confidential...

CVE-2026-81392

CVE-2026-81392 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized, local attacker to disclose information . The CVSS v3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interaction and a loca...

CVE-2026-78526

CVE-2026-78526 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with an attack vector of network, low complexity, no privileges required, and user interaction requ...

CVE-2026-69734

Microsoft Office Word is affected by an integer overflow or wraparound flaw that allows an unauthorized attacker to disclose information over a network . The flaw requires user interaction (opening a crafted document) but no prior authentication, carrying a CVSS 3.1 score of 6.5 (Medium) with hig...

CVE-2026-72974

Microsoft Office Excel is affected by a buffer over-read vulnerability that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N , meaning exploitation requires user interaction (likely opening ...

CVE-2026-81400

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, no privileges required, and user interaction required, resulting in a high impact to confidentiality with no ...

CVE-2026-81393

CVE-2026-81393 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting a local attack vector , no privileges required , but user interaction required (e.g., opening a craf...

CVE-2026-80084

CVE-2026-80084 is an out-of-bounds read vulnerability in Microsoft Office Outlook that allows an unauthorized, network-based attacker to disclose information when user interaction is required. The vulnerability is rated CVSS 6.5 (Medium) with high impact to confidentiality but no impact on integr...

CVE-2026-81386

Microsoft Office Excel is affected by a heap-based buffer overflow that allows an unauthorized attacker to execute code locally after a user opens a crafted file. The CVSS 3.1 score is 7.8 (High) with a local attack vector, low complexity, no privileges required, and user interaction required, re...

CVE-2026-81394

CVE-2026-81394 is an information disclosure vulnerability in Microsoft Office Excel . Exposure of sensitive system information to an unauthorized control sphere allows a local, unprivileged attacker to disclose information, provided the target user interacts with a crafted file. The CVSS 3.1 scor...

CVE-2026-81395

CVE-2026-81395 is an out-of-bounds read in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, no privileges required, and user interaction required, resulting in high confident...

CVE-2026-81396

CVE-2026-81396 is a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The vulnerability requires user interaction (e.g., opening a malicious file) but does not require prior privileges, with a CVSS 3.1 score of 7.8 (HIGH) . The pri...

CVE-2026-81401

CVE-2026-81401 is a type confusion vulnerability in Microsoft Office Excel that allows an unauthorized attacker to disclose information locally . The flaw stems from access of a resource using an incompatible type. The assigned CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low comple...