CVE-2026-70317

This CVE (CVE-2026-70317) concerns Microsoft Office and is caused by the use of an uninitialized resource, enabling an attacker to disclose information locally. The NVD/CVE records indicate a local attack vector with low complexity and no privileges required, but user interaction is required. The...

CVE-2026-55018

CVE-2026-55018 is a use-after-free in Microsoft Office that enables local code execution. The vulnerability is listed among Microsoft Office family issues and is part of July 2026 updates; exploitation requires the user to open a malicious Office file or link (SharePoint variants may not require ...

CVE-2026-63529

CVE-2026-63529 affects Microsoft Office. The documented issue is an out-of-bounds read that enables a local attacker to disclose information. The available sources do not provide specific impacted products, versions, or vulnerable components beyond the general Microsoft Office reference, nor deta...

CVE-2026-55023

CVE-2026-55023 is a Microsoft Office information-disclosure vulnerability described as an out-of-bounds read that could allow a local attacker to disclose information. CVSS v3.1 base score 5.5 (MEDIUM): attack vector LOCAL, attack complexity LOW, privileges required NONE, user interaction REQUIRE...

CVE-2026-55056

CVE-2026-55056 is a heap-based buffer overflow in Microsoft Office that enables local code execution via parsing/processing of Office documents. Affected: Microsoft Office and related components. Root cause: heap-based overflow. Impact: unauthorized local code execution with high severity. Status...