CVE-2021-42292

CVE-2021-42292 is a Microsoft Excel Security Feature Bypass vulnerability in Microsoft Excel that enables local privilege bypass (local access required). The vulnerability is documented across multiple feeds, with patched fixes provided by Microsoft via Patch Tuesday advisories. Connected sources...

CVE-2026-45456

CVE-2026-45456 affects Microsoft Office apps (notably Outlook and Word) and is caused by a resource access type confusion that can lead to local code execution. The vulnerability allows an authenticated, local attacker to run arbitrary code without user interaction, with high impact on confidenti...

CVE-2026-70329

CVE-2026-70329 describes an integer overflow or wraparound in Microsoft Office Outlook that allows an unauthenticated attacker to achieve remote code execution over a network . The associated metrics indicate a CVSS v3.1 base score of 8.8 (HIGH) with attack vector: NETWORK , attack complexity: LO...

CVE-2026-62870

CVE-2026-62870 describes a use-after-free in Microsoft Excel that could allow a remote attacker to execute code over a network. The issue has a high impact (C/H/I/A) with network-based, low-attack-complexity exploitation and requires user interaction. Microsoft has published a security update (KB...

CVE-2026-64898

CVE-2026-64898 describes a heap-based buffer overflow in Microsoft Office that enables a local code execution under an attack vector of local access with user interaction required. The CVSS 3.1 metrics indicate high severity (base score 7.8), with impact to confidentiality, integrity, and availab...

CVE-2026-45458

Microsoft Office (including Outlook and Word) is affected by CVE-2026-45458 due to a type-confusion in resource access, enabling local code execution. The vulnerability arises when an incompatible type is accessed, with a local attack vector, no user interaction, and no privileges required. The C...

CVE-2026-45463

CVE-2026-45463 describes a heap-based buffer overflow in Microsoft Office that allows an attacker with local access to execute code on the affected system. The sources identify Microsoft Office and classify the flaw as a heap-based overflow with high impact (CVSSv3.1: 8.4, LOCAL access, no user i...

CVE-2026-65661

Microsoft Office is affected by CVE-2026-65661 due to a heap-based buffer overflow that allows an attacker with local access to execute code on a vulnerable system. The CVSS 3.1 vector indicates a Local attack with user interaction required and a High impact on confidentiality, integrity, and ava...

CVE-2026-62882

The CVE-2026-62882 entry concerns Microsoft Office Outlook, with a vulnerability described as insufficiently protected credentials that allows an unauthenticated attacker to perform spoofing over a network. According to the CVSSv3.1 metrics, the impact is low confidentiality, no integrity or avai...

CVE-2026-68810

CVE-2026-68810 describes a vulnerability in Microsoft Office Excel where an untrusted pointer dereference could allow a local attacker to execute code. Documents consistently cite a local exploit path with high impact (confidentiality, integrity, and availability all rated High) and a user intera...

CVE-2026-44819

CVE-2026-44819 affects Microsoft Office and is described as a heap-based buffer overflow that allows a local attacker to execute code. The vulnerability is characterized by a LOCAL attack vector, LOW attack complexity, and requires user interaction, with a high impact on confidentiality, integrit...

CVE-2026-55133

CVE-2026-55133 affects Microsoft Office OneNote. The issue is a heap-based buffer overflow in OneNote that can allow a local attacker to execute code on the affected system. CVSSv3.1 indicates ATT&CK: local access, user interaction required, with high impact to confidentiality, integrity, and ava...

CVE-2026-63515

CVE-2026-63515 concerns an out-of-bounds read in Microsoft Office that enables local code execution when exploited by an attacker who must have some user interaction. The affected product is Microsoft Office; the root cause is an out-of-bounds read in the code path used during document handling. ...

CVE-2026-68802

CVE-2026-68802 describes an out-of-bounds read flaw in Microsoft Office Excel that can allow a local attacker to disclose information. The vulnerability affects Excel and is triggered locally, requiring user interaction per the CVSS:3.1 metrics (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). The root caus...

CVE-2026-70130

CVE-2026-70130 affects Microsoft Office and is described as a heap-based buffer overflow that allows a local attacker to execute code. The vulnerability is triggered locally (attack vector: LOCAL) with no user interaction required, and it has high impact on confidentiality, integrity, and availab...

CVE-2026-47290

CVE-2026-47290 is a Microsoft Office remote-code-execution vulnerability described as a use-after-free in Office components. Affected software includes Microsoft Office family (Word, Excel, PowerPoint, SharePoint) with the Office ecosystem cited in NCsc advisories and CIRCL sighting logs. The CVS...

CVE-2026-58651

CVE-2026-58651 describes a heap-based buffer overflow in Microsoft Word (part of Microsoft Office) that allows an unauthenticated, local attacker to execute arbitrary code on the affected system. The vulnerability is triggered via Word processing of crafted input, enabling code execution with the...

CVE-2026-44817

CVE-2026-44817 is an Excel vulnerability: an integer underflow (wrap/wraparound) in Microsoft Excel could allow a local attacker to execute code. Exploitation details in the public metrics show local access with user interaction required and high impact on confidentiality, integrity, and availabi...

CVE-2026-68804

CVE-2026-68804 : A numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability is documented across multiple sources (NVD, CVE listings) with the impact described as local code execution and a high base score (CVSS 3.1: AV=L, AC=L,...

CVE-2026-68805

CVE-2026-68805 affects Microsoft Excel (part of Microsoft Office) with a heap-based buffer overflow leading to remote code execution. The connected documents consistently describe it as a heap-based overflow in Excel that enables an attacker to run arbitrary code, with a CVSSv3.1 base score of 7....

CVE-2026-68816

CVE-2026-68816 is a stack-based buffer overflow in Microsoft Excel that enables local code execution by an unauthenticated attacker. The affected product is Microsoft Office Excel; the root cause is a stack-based overflow in Excel’s handling that can be triggered locally. The CVSS 3.1 base score ...

CVE-2026-68794

CVE-2026-68794 is a heap-based buffer overflow in Microsoft Office Excel that can allow an attacker to execute code locally on affected systems. Available documents confirm the vulnerability affects Excel, with a heap-based overflow as the underlying issue; however, no specific affected versions,...

CVE-2026-68799

CVE-2026-68799 : A vulnerability in Microsoft Excel arises from the use of an uninitialized resource, enabling a local attacker to disclose information. Affected product is Microsoft Excel; the issue is a local, low-exploitation vector with user interaction required and a reported CVSSv3.1 base s...

CVE-2026-63528

CVE-2026-63528 describes an out-of-bounds read in Microsoft Office Word that allows a local attacker to disclose information. The vulnerability affects Word and is exploitable locally with user interaction required; the underlying cause is an out-of-bounds read. The CVSS v3.1 vector indicates low...

CVE-2026-65807

Microsoft Excel is affected by CVE-2026-65807 due to a type confusion in resource access, allowing remote code execution over a network. The vulnerability arises from incompatible type handling in a resource access path within Excel, impacting users of Microsoft Office Excel. The CVSS 3.1 base sc...

CVE-2026-55134

CVE-2026-55134 is a stack-based buffer overflow in Microsoft Word (Office) that can allow a local attacker to execute arbitrary code. The CVE entry is corroborated by multiple sources in the Connected documents, which identify Word as the affected component and describe local code execution as th...

CVE-2026-70320

CVE-2026-70320 concerns an issue in Microsoft Office PowerPoint where improper input validation can allow an unauthorized local attacker to disclose information. The affected product is PowerPoint (part of Microsoft Office), and the underlying cause is improper input validation leading to informa...

CVE-2026-44818

CVE-2026-44818 affects Microsoft Excel. A integer underflow (wrap/wraparound) in Excel is described as allowing an unauthorized attacker to execute code locally. The associated CVSS 3.1 vector indicates Local attack vector, high impact on confidentiality, integrity, and availability, with High pr...

CVE-2026-50387

CVE-2026-50387 — Windows GDI Elevation of Privilege Affects: Windows GDI subsystem. The vulnerability is a stack-based buffer overflow in GDI that can be triggered by an authorized attacker to achieve local privilege escalation. Impact: Local elevation of privileges with a CVSS v3.1 base score of...

CVE-2026-64906

CVE-2026-64906 describes a heap-based buffer overflow in Microsoft Office Access that allows an unprivileged, local attacker to execute code. Affected software is Microsoft Office Access; the vulnerability is caused by a heap-based overflow in the handling of certain inputs, enabling arbitrary co...

CVE-2026-45474

The documents confirm CVE-2026-45474 is a Microsoft Office vulnerability described as a heap-based buffer overflow that allows an unauthenticated/unauthorized attacker to execute code locally on affected systems. Affected product is Microsoft Office, with the root cause identified as a heap-based...

CVE-2026-68796

CVE-2026-68796 describes a heap-based buffer overflow in Microsoft Excel that can lead to local code execution. Impact per CVSS: HIGH, with local attack vector, required user interaction, and high confidentiality/integrity/availability impact. Affected product is Microsoft Excel; root cause is a ...

CVE-2026-68817

CVE-2026-68817 describes a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. Affected product is Microsoft Excel; root cause is a stack-based overflow in Excel's handling of input. The CVE entry notes a high-severity impact (base s...

CVE-2026-55035

CVE-2026-55035 is an information-disclosure vulnerability described as an out-of-bounds read in Microsoft Office that allows a locally authenticated attacker to disclose information. Connected sources confirm this affects multiple Office components (Word, Excel, PowerPoint, SharePoint, etc.) and ...

CVE-2026-63527

Microsoft Word is affected by CVE-2026-63527 due to a stack-based buffer overflow in Word documents/processing. The vulnerability allows an unauthorized attacker to execute code locally on a system that processes a crafted document, with local attack vector and user interaction required. The CVSS...

CVE-2026-63525

CVE-2026-63525 involves a numeric truncation error in Microsoft Office Word that could allow an attacker to achieve local code execution. The entry specifies a local attack vector with low attack complexity and no privileges required, and user interaction is required. The impact is high on confid...

CVE-2026-45455

CVE-2026-45455 is an Excel information-disclosure vulnerability (out-of-bounds read) in Microsoft Office Excel. The issue allows an unauthorized attacker to disclose information over a network. Multiple connected documents confirm the affected component as Microsoft Excel (Office) and attribute t...

CVE-2026-64908

In CVE-2026-64908, the vulnerability is a heap-based buffer overflow in Microsoft Office Access. The issue affects Access components handling data processing, allowing a local attacker to execute code on the affected system. This is described as a local, user-interaction-requiring flaw with high ...

CVE-2026-64915

CVE-2026-64915 affects Microsoft Word, with a heap-based buffer overflow that permits local code execution. Exploitation requires local access and user interaction; CVSS v3.1 base score 7.8 (HIGH). A patch/mitigation is available from Microsoft via the MSRC advisory referenced in the entry (updat...

CVE-2026-68795

Microsoft Excel (Office) is affected by a stack-based buffer overflow (CVE-2026-68795) that could allow an attacker to execute code locally. The CVSS v3.1 score is 7.8 (HIGH) with LOCAL attack vector, requiring user interaction. The available documents do not specify a patched version or workarou...

CVE-2026-45469

CVE-2026-45469 affects Microsoft Excel (Office) and is caused by an integer underflow/wraparound in Excel. The vulnerability can allow a local attacker to execute code on the affected system; the CVSS indicates LOCAL access, required user interaction, and high impact to confidentiality, integrity...

CVE-2026-63526

CVE-2026-63526 is a stack-based buffer overflow in the Microsoft Office Graphics Component that can allow an attacker with local access to execute code on a vulnerable system. Affected software is Microsoft Office (Graphics Component). The underlying issue is a buffer overflow in the component’s ...

CVE-2026-68809

CVE-2026-68809 describes an information-disclosure flaw in Microsoft Office PowerPoint caused by incomplete cleanup. A local attacker could disclose information due to this cleanup issue. CVSS v3.1: 5.5 (Medium); Vector: Local; Privileges Required: None; User Interaction: Required; Scope: Unchang...

CVE-2026-50408

CVE-2026-50408 is an information-disclosure vulnerability in Microsoft Office Excel caused by an out-of-bounds read that can disclose information locally to an attacker. The NVD/NCSC entries corroborate Excel as the affected product; Microsoft’s MSRC entry labels it as a Excel information-disclos...

CVE-2026-55132

Microsoft Word/Office vulnerability CVE-2026-55132 involves a double-free in Word that could allow a local attacker to execute arbitrary code. Affected product: Microsoft Word (Office suite). Root cause: memory management flaw (double free) in Word’s handling of certain documents. Impact: local c...

CVE-2026-63513

CVE-2026-63513 affects Microsoft Office (Graphics Component) via a heap-based buffer overflow that enables local code execution. The CVE is described as a Heap-based buffer overflow in Microsoft Office allowing an unauthorized attacker to execute code locally. CVSS 3.1 indicates LOCAL attack vect...

CVE-2026-55022

CVE-2026-55022 is a type-confusion vulnerability in Microsoft Office that could allow local code execution when a user opens a specially crafted file or clicks a malicious link in Office applications (Word/Excel/PowerPoint/SharePoint are affected as listed by public advisories). Connected sources...

CVE-2026-55032

CVE-2026-55032 is a Microsoft Word remote code execution vulnerability reported as a use-after-free issue in Microsoft Office Word. The CVE entry specifies local attack vector with user interaction required, yielding a high severity (CVSS 3.1: 7.8, HIGH) and potential for arbitrary code execution...

CVE-2026-70310

Summary: CVE-2026-70310 is an information-disclosure vulnerability in Microsoft Word caused by an out-of-bounds read. The issue allows a local, unauthenticated user to disclose information on affected systems, with exploitation requiring user interaction and a local access context (per CVSS: LOCA...

CVE-2026-55121

CVE-2026-55121 corresponds to an out-of-bounds read in Microsoft Office that enables an unauthenticated or authorized local attacker to disclose information. The public descriptions across NVD/MSRC and EUVD notes indicate the vulnerability affects Microsoft Office components and results in local ...