CVE-2026-64907

CVE-2026-64907 describes a stack-based buffer overflow in Microsoft Office Word that enables local code execution by an unauthorized attacker. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL access, REQUIRED user interaction, and HIGH impact on confidentiality, integrity, and availability. The a...

CVE-2026-55035

CVE-2026-55035 is an information-disclosure vulnerability described as an out-of-bounds read in Microsoft Office that allows a locally authenticated attacker to disclose information. Connected sources confirm this affects multiple Office components (Word, Excel, PowerPoint, SharePoint, etc.) and ...

CVE-2026-63517

CVE-2026-63517 describes an out-of-bounds read in the Microsoft Office Graphics Component that allows a local attacker to disclose information. The affected software is Microsoft Office (Graphics Component). Root cause: out-of-bounds read. Impact: confidentiality impact High; attacker needs local...

CVE-2026-45455

CVE-2026-45455 is an Excel information-disclosure vulnerability (out-of-bounds read) in Microsoft Office Excel. The issue allows an unauthorized attacker to disclose information over a network. Multiple connected documents confirm the affected component as Microsoft Excel (Office) and attribute t...

CVE-2026-45474

The documents confirm CVE-2026-45474 is a Microsoft Office vulnerability described as a heap-based buffer overflow that allows an unauthenticated/unauthorized attacker to execute code locally on affected systems. Affected product is Microsoft Office, with the root cause identified as a heap-based...

CVE-2026-68809

CVE-2026-68809 describes an information-disclosure flaw in Microsoft Office PowerPoint caused by incomplete cleanup. A local attacker could disclose information due to this cleanup issue. CVSS v3.1: 5.5 (Medium); Vector: Local; Privileges Required: None; User Interaction: Required; Scope: Unchang...

CVE-2026-55132

Microsoft Word/Office vulnerability CVE-2026-55132 involves a double-free in Word that could allow a local attacker to execute arbitrary code. Affected product: Microsoft Word (Office suite). Root cause: memory management flaw (double free) in Word’s handling of certain documents. Impact: local c...

CVE-2026-56192

The CVE-2026-56192 entry describes a local, information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read. Affected product: Microsoft Office suite (Office components) per multiple connected sources. Root cause and exact vulnerable component are not fully detailed in th...

CVE-2026-64899

CVE-2026-64899 concerns a local vulnerability in Microsoft Office causing an out-of-bounds read that enables an unauthenticated or authorized attacker to disclose information locally. The connected documents confirm the affected product family (Microsoft Office) and the impact (information disclo...

CVE-2026-68801

CVE-2026-68801 describes a heap-based buffer overflow in Microsoft Excel that could allow an attacker to execute arbitrary code locally. The vulnerability arises from a heap overflow condition within Excel’s handling of certain input, leading to potential code execution with the user’s privileges...

CVE-2026-45469

CVE-2026-45469 affects Microsoft Excel (Office) and is caused by an integer underflow/wraparound in Excel. The vulnerability can allow a local attacker to execute code on the affected system; the CVSS indicates LOCAL access, required user interaction, and high impact to confidentiality, integrity...

CVE-2026-45485

CVE-2026-45485: In Microsoft Office, an out-of-bounds read leads to local information disclosure. Documents confirm the vulnerability and its impact (local disclosure) with low severity (CVSS 3.1:3.3). Exploitation details and affected component/version specifics are not provided in the supplied ...

CVE-2026-55032

CVE-2026-55032 is a Microsoft Word remote code execution vulnerability reported as a use-after-free issue in Microsoft Office Word. The CVE entry specifies local attack vector with user interaction required, yielding a high severity (CVSS 3.1: 7.8, HIGH) and potential for arbitrary code execution...

CVE-2026-68808

CVE-2026-68808 affects Microsoft Excel (Office) with an out-of-bounds read that allows a local attacker to disclose information. Root cause: out-of-bounds read in Excel. Impact: local information disclosure; CVSSv3.1 metrics indicate Local access, no privileges, user interaction required, Confide...

CVE-2026-47642

CVE-2026-47642 is a Microsoft Office Excel vulnerability described as a use-after-free in Excel that enables a local attacker to execute code. The connected sources confirm the issue affects Microsoft Excel and is capable of arbitrary-code execution, with a CVSSv3.1 base score of 7.8 (HIGH). Atta...

CVE-2026-64909

Microsoft Office is affected by CVE-2026-649909 due to an integer underflow, enabling local code execution. The root cause is a wrap/wraparound flaw in an Office component, with the impact described as local RCE. No specific affected versions or patches are provided in the supplied documents. Exp...

CVE-2026-50314

CVE-2026-50314 is a Microsoft Office use-after-free vulnerability that enables a local attacker to execute arbitrary code by convincing a user to open a malicious document or link (Office components implicated include Word/Excel/PowerPoint/SharePoint per provided sources). The issue is described ...

CVE-2026-55121

CVE-2026-55121 corresponds to an out-of-bounds read in Microsoft Office that enables an unauthenticated or authorized local attacker to disclose information. The public descriptions across NVD/MSRC and EUVD notes indicate the vulnerability affects Microsoft Office components and results in local ...

CVE-2026-70319

CVE-2026-70319 involves Microsoft Office Word with an issue in the handling of input validation. The root cause is reported as improper input validation, leading to an information disclosure vulnerability that can be exploited locally by an unauthenticated attacker who can cause the application t...

CVE-2026-55045

CVE-2026-55045 is an Office remote code execution vulnerability described as an out-of-bounds read in Microsoft Office that could enable a local attacker to execute code. Connected sources tie this CVE to Microsoft Office components (Word/PowerPoint/SharePoint) with local-exploit prerequisites an...

CVE-2026-66806

CVE-2026-66806 affects the Red Hat console component used with Multicluster Engine for Kubernetes and Red Hat Advanced Cluster Management for Kubernetes. The root cause is failure to verify TLS certificates for outbound connections when HTTPS_PROXY is not configured, enabling a network-positioned...

CVE-2026-66807

CVE-2026-66807 is a Microsoft Office Graphics Component vulnerability described as a stack-based buffer overflow. Affected product is Microsoft Office/Graphics Component; impact centers on code execution with a CVSSv3.1 base score of 7.8 (HIGH). Exploitation vector/conflict exists between sources...

CVE-2026-68815

CVE-2026-68815 (Microsoft Excel) involves a heap-based buffer overflow in Excel that allows local code execution by an unauthorized attacker; the exploitation requires user interaction and has a high impact on confidentiality, integrity, and availability. Product: Microsoft Office Excel (Windows)...

CVE-2026-70318

CVE-2026-70318 affects Microsoft Office Excel via improper input validation, enabling local information disclosure without admin privileges. Affected component: Excel; root cause: input validation flaw; impact: potential leakage of sensitive data. CVSSv3.1: 5.5 (Medium) with LOCAL attacker, user ...

CVE-2026-55022

CVE-2026-55022 is a type-confusion vulnerability in Microsoft Office that could allow local code execution when a user opens a specially crafted file or clicks a malicious link in Office applications (Word/Excel/PowerPoint/SharePoint are affected as listed by public advisories). Connected sources...

CVE-2026-64920

CVE-2026-64920 affects Microsoft Office Access. It is a heap-based buffer overflow in Access components that can let an unauthorized attacker locally execute code. CVSS guidance indicates local attack vector, required user interaction, and high impact across confidentiality, integrity, and availa...

CVE-2026-68800

CVE-2026-68800 is a heap-based overflow in Microsoft Office Excel that could allow a local attacker to execute code with the user’s privileges after exploiting via a crafted file opened or processed by Excel. Affected software is Microsoft Excel (Office). The advisory notes a local attack vector ...

CVE-2026-70314

CVE-2026-70314 : Affects Microsoft Office. The issue arises from improper input validation, enabling a local attacker to disclose information. The CVSS v3.1 base metrics indicate a Medium severity (5.5) with Local attack vector, requiring user interaction, and no impact on integrity or availabili...

CVE-2026-50408

CVE-2026-50408 is an information-disclosure vulnerability in Microsoft Office Excel caused by an out-of-bounds read that can disclose information locally to an attacker. The NVD/NCSC entries corroborate Excel as the affected product; Microsoft’s MSRC entry labels it as a Excel information-disclos...

CVE-2026-55017

Mode C: CVE-2026-55017 is a heap-based buffer overflow affecting Microsoft Office, enabling a local attacker to execute code. The available connected documents confirm this vulnerability within Microsoft Office products (Office components cited in the NCSC advisory and multiple CVE trackers). Roo...

CVE-2026-55038

CVE-2026-55038 is a stack-based buffer overflow in Microsoft Word (Office) that can allow local code execution. The vulnerability affects Word and is exploitable by a crafted file opened by a user with no privileges required, though user interaction is needed (per CVSS: LOCAL, UI: REQUIRED, Privi...

CVE-2026-55041

CVE-2026-55041 is a heap-based buffer overflow in Microsoft Office Excel that can allow a local attacker to execute arbitrary code. The issue affects Excel (and is reflected in the overall Office ecosystem advisories) and arises from a heap overflow in a component used by Excel. The CVSS v3.1 vec...

CVE-2026-70313

CVE-2026-70313 affects Microsoft Office PowerPoint and is described as an improper input validation issue that can lead to local information disclosure. CVSS 3.1 vector (LOCAL, LOW attack complexity, NONE privileges, USER interaction required) yields a base score of 7.8 (HIGH). The provided docum...

CVE-2026-45459

The CVE-2026-45459 entry concerns Microsoft Excel. A protection-mechanism failure in Excel is described as allowing a local attacker to bypass a security feature. According to the available data, the vulnerability has a low base score (CVSS 3.1: 3.3), with LOCAL attack vector, LOW attack complexi...

CVE-2026-63531

CVE-2026-63531 is a Microsoft Office Word vulnerability described as an out-of-bounds read that allows a local, unauthenticated attacker to disclose information. The CVSS v3.1 base score is 5.5 (Medium), with attack vector Local, required user interaction, low attack complexity, and a High impact...

CVE-2026-68806

Microsoft Excel contains an out-of-bounds write vulnerability (CVE-2026-68806) that can allow an authenticated local attacker to execute code on the affected system. The CVE description specifies local code execution via an out-of-bounds write in Excel. The connected records confirm the issue is ...

CVE-2026-50665

CVE-2026-50665 is described as an information-disclosure vulnerability in Microsoft Office caused by an out-of-bounds read, enabling a local attacker to disclose data. Public sources in the connected set reiterate the issue as a Microsoft Office vulnerability with potential to access sensitive in...

CVE-2026-55037

CVE-2026-55037 affects Microsoft Office Excel. A heap-based buffer overflow in Excel allows an unauthenticated/unauthorized attacker to execute arbitrary code locally. The CVSSv3.1 vector indicates a local attack with low attack complexity, no privileges required, but user interaction is required...

CVE-2026-63521

Microsoft Office Word is affected by CVE-2026-63521, described as an out-of-bounds read that allows a local attacker to disclose information. The NVD entry notes a CVSS v3.1 base score of 5.5 (Medium), with Local attack vector, Low attack complexity, and No privileges required, but User Interacti...

CVE-2026-63532

CVE-2026-63532 affects Microsoft Office and is caused by an integer overflow/wraparound in a component of Office, enabling local code execution by an unauthenticated user with at least user interaction. The available sources describe the vulnerability class and impact but do not provide specific ...

CVE-2026-48580

CVE-2026-48580 affects Microsoft Office Excel. The vulnerability is an untrusted pointer dereference in Excel that can allow an attacker to disclose information locally. Based on linked sources, this is a local vulnerability with medium severity (CVSS 3.1: 5.5) and requires user interaction; expl...

CVE-2026-65664

This CVE describes a heap-based buffer overflow in Microsoft Office that allows a local attacker to execute code. The available documents mention the vulnerability as a local code execution issue, but do not provide detailed affected versions, root cause analysis beyond the heap overflow, or reme...

CVE-2026-55049

CVE-2026-55049 is a heap-based buffer overflow in Microsoft Office that could let an attacker execute code locally. Public artifacts tie it to Office components (Word/Excel/PowerPoint/SharePoint) with high impact (CVSS 3.1: 7.8, local, user-interaction required). Connected sources confirm Office ...

CVE-2026-55128

CVE-2026-55128 is a Use-after-free in Microsoft Word that enables local code execution by an unauthenticated attacker who powers the exploit via a crafted file/link. Affected product scope is Microsoft Word/Office as per Microsoft advisories; document does not specify exact vulnerable builds or p...

CVE-2026-55140

CVE-2026-55140 is a Microsoft Office remote code execution vulnerability caused by a heap-based buffer overflow in Office components. An unauthorized attacker could exploit this locally to run arbitrary code on a vulnerable system, as described in multiple security sources. Connected documents co...

CVE-2026-64914

CVE-2026-64914 is a heap-based buffer overflow in Microsoft Office Access that enables local code execution. According to the available data, the vulnerability has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, NO privileges required, and user interaction required. Impact is asses...

CVE-2026-44823

The CVE-2026-44823 entry concerns an integer underflow (wrap or wraparound) in Microsoft Office Excel that could allow an attacker to execute code locally. Affected product: Microsoft Excel within Microsoft Office. The vulnerability is described as enabling local code execution with attack vector...

CVE-2026-62842

CVE-2026-62842 is an out-of-bounds read in the Microsoft Office Graphics Component that allows a local attacker to disclose information. Exploitation is local with user interaction required; no privileges required and the impact is a confidentiality loss (C:H, I:N, A:N). The CVSSv3.1 base score i...

CVE-2026-45472

CVE-2026-45472 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code locally. The connected sources (NVD, CVE listing) corroborate a local-execution impact due to a heap overflow in Office components. No explicit root-cause details beyond the hea...

CVE-2026-55127

CVE-2026-55127 is a heap-based buffer overflow in Microsoft Word (Office) that enables local code execution. Public sources corroborate a Word-related RCE risk, with the issue categorized under Office/Word vulnerabilities in July 2026 patch disclosures. Remediation is via Microsoft’s July 2026 se...