CVE-2026-81397

CVE-2026-81397 is a heap-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The attack vector is local with low complexity and no privileges required, though user interaction is required (e.g., opening a crafted file). The CVSS 3.1 score ...

CVE-2026-69764

CVE-2026-69764 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized, remote attacker to achieve code execution over a network , rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. User interaction is required, and no known exploitation has b...

CVE-2026-64918

CVE-2026-64918 is a spoofing vulnerability in Microsoft Office caused by insufficiently protected credentials , allowing an unauthorized attacker to perform spoofing over a network. The attack requires user interaction but needs no prior privileges and has low complexity , with a high impact on c...

CVE-2026-78512

Microsoft Office Word is affected by a numeric truncation error that allows an unauthorized attacker to achieve remote code execution over a network. Exploitation requires user interaction (e.g., opening a crafted document) but no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) with full impac...

CVE-2026-81387

CVE-2026-81387 is an information disclosure vulnerability in Microsoft Office Excel . It allows an unauthorized attacker with local access to expose sensitive system information, requiring user interaction and no prior privileges. The CVSS v3.1 score is 5.5 (MEDIUM) , with high confidentiality im...

CVE-2026-80088

CVE-2026-80088 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating that while user interaction is required...

CVE-2026-69626

CVE-2026-69626 is a buffer over-read in Microsoft Office that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction but no prior privileges, and its primary impact is on confidentiality (high), with no effect on integrity or availabil...

CVE-2026-81958

Microsoft Office Excel is affected by a use of uninitialized resource flaw that allows an unauthorized, local attacker to disclose information. The vulnerability requires user interaction (e.g., opening a crafted file) and results in a high confidentiality impact with no integrity or availability...