CVE-2026-45456

CVE-2026-45456 affects Microsoft Office apps (notably Outlook and Word) and is caused by a resource access type confusion that can lead to local code execution. The vulnerability allows an authenticated, local attacker to run arbitrary code without user interaction, with high impact on confidenti...

CVE-2026-70329

CVE-2026-70329 describes an integer overflow or wraparound in Microsoft Office Outlook that allows an unauthenticated attacker to achieve remote code execution over a network . The associated metrics indicate a CVSS v3.1 base score of 8.8 (HIGH) with attack vector: NETWORK , attack complexity: LO...

CVE-2026-62870

CVE-2026-62870 describes a use-after-free in Microsoft Excel that could allow a remote attacker to execute code over a network. The issue has a high impact (C/H/I/A) with network-based, low-attack-complexity exploitation and requires user interaction. Microsoft has published a security update (KB...

CVE-2026-64898

CVE-2026-64898 describes a heap-based buffer overflow in Microsoft Office that enables a local code execution under an attack vector of local access with user interaction required. The CVSS 3.1 metrics indicate high severity (base score 7.8), with impact to confidentiality, integrity, and availab...

CVE-2026-45458

Microsoft Office (including Outlook and Word) is affected by CVE-2026-45458 due to a type-confusion in resource access, enabling local code execution. The vulnerability arises when an incompatible type is accessed, with a local attack vector, no user interaction, and no privileges required. The C...

CVE-2026-62882

The CVE-2026-62882 entry concerns Microsoft Office Outlook, with a vulnerability described as insufficiently protected credentials that allows an unauthenticated attacker to perform spoofing over a network. According to the CVSSv3.1 metrics, the impact is low confidentiality, no integrity or avai...

CVE-2026-45463

CVE-2026-45463 describes a heap-based buffer overflow in Microsoft Office that allows an attacker with local access to execute code on the affected system. The sources identify Microsoft Office and classify the flaw as a heap-based overflow with high impact (CVSSv3.1: 8.4, LOCAL access, no user i...

CVE-2026-68810

CVE-2026-68810 describes a vulnerability in Microsoft Office Excel where an untrusted pointer dereference could allow a local attacker to execute code. Documents consistently cite a local exploit path with high impact (confidentiality, integrity, and availability all rated High) and a user intera...

CVE-2026-65661

Microsoft Office is affected by CVE-2026-65661 due to a heap-based buffer overflow that allows an attacker with local access to execute code on a vulnerable system. The CVSS 3.1 vector indicates a Local attack with user interaction required and a High impact on confidentiality, integrity, and ava...

CVE-2026-63515

CVE-2026-63515 concerns an out-of-bounds read in Microsoft Office that enables local code execution when exploited by an attacker who must have some user interaction. The affected product is Microsoft Office; the root cause is an out-of-bounds read in the code path used during document handling. ...

CVE-2026-44819

CVE-2026-44819 affects Microsoft Office and is described as a heap-based buffer overflow that allows a local attacker to execute code. The vulnerability is characterized by a LOCAL attack vector, LOW attack complexity, and requires user interaction, with a high impact on confidentiality, integrit...

CVE-2026-68802

CVE-2026-68802 describes an out-of-bounds read flaw in Microsoft Office Excel that can allow a local attacker to disclose information. The vulnerability affects Excel and is triggered locally, requiring user interaction per the CVSS:3.1 metrics (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). The root caus...

CVE-2026-55133

CVE-2026-55133 affects Microsoft Office OneNote. The issue is a heap-based buffer overflow in OneNote that can allow a local attacker to execute code on the affected system. CVSSv3.1 indicates ATT&CK: local access, user interaction required, with high impact to confidentiality, integrity, and ava...

CVE-2026-70130

CVE-2026-70130 affects Microsoft Office and is described as a heap-based buffer overflow that allows a local attacker to execute code. The vulnerability is triggered locally (attack vector: LOCAL) with no user interaction required, and it has high impact on confidentiality, integrity, and availab...

CVE-2026-58651

CVE-2026-58651 describes a heap-based buffer overflow in Microsoft Word (part of Microsoft Office) that allows an unauthenticated, local attacker to execute arbitrary code on the affected system. The vulnerability is triggered via Word processing of crafted input, enabling code execution with the...

CVE-2026-68816

CVE-2026-68816 is a stack-based buffer overflow in Microsoft Excel that enables local code execution by an unauthenticated attacker. The affected product is Microsoft Office Excel; the root cause is a stack-based overflow in Excel’s handling that can be triggered locally. The CVSS 3.1 base score ...

CVE-2026-68805

CVE-2026-68805 affects Microsoft Excel (part of Microsoft Office) with a heap-based buffer overflow leading to remote code execution. The connected documents consistently describe it as a heap-based overflow in Excel that enables an attacker to run arbitrary code, with a CVSSv3.1 base score of 7....

CVE-2026-68799

CVE-2026-68799 : A vulnerability in Microsoft Excel arises from the use of an uninitialized resource, enabling a local attacker to disclose information. Affected product is Microsoft Excel; the issue is a local, low-exploitation vector with user interaction required and a reported CVSSv3.1 base s...

CVE-2026-68794

CVE-2026-68794 is a heap-based buffer overflow in Microsoft Office Excel that can allow an attacker to execute code locally on affected systems. Available documents confirm the vulnerability affects Excel, with a heap-based overflow as the underlying issue; however, no specific affected versions,...

CVE-2026-68804

CVE-2026-68804 : A numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability is documented across multiple sources (NVD, CVE listings) with the impact described as local code execution and a high base score (CVSS 3.1: AV=L, AC=L,...

CVE-2026-47290

CVE-2026-47290 is a Microsoft Office remote-code-execution vulnerability described as a use-after-free in Office components. Affected software includes Microsoft Office family (Word, Excel, PowerPoint, SharePoint) with the Office ecosystem cited in NCsc advisories and CIRCL sighting logs. The CVS...

CVE-2026-68817

CVE-2026-68817 describes a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. Affected product is Microsoft Excel; root cause is a stack-based overflow in Excel's handling of input. The CVE entry notes a high-severity impact (base s...

CVE-2026-70310

Summary: CVE-2026-70310 is an information-disclosure vulnerability in Microsoft Word caused by an out-of-bounds read. The issue allows a local, unauthenticated user to disclose information on affected systems, with exploitation requiring user interaction and a local access context (per CVSS: LOCA...

CVE-2026-63528

CVE-2026-63528 describes an out-of-bounds read in Microsoft Office Word that allows a local attacker to disclose information. The vulnerability affects Word and is exploitable locally with user interaction required; the underlying cause is an out-of-bounds read. The CVSS v3.1 vector indicates low...

CVE-2026-44817

CVE-2026-44817 is an Excel vulnerability: an integer underflow (wrap/wraparound) in Microsoft Excel could allow a local attacker to execute code. Exploitation details in the public metrics show local access with user interaction required and high impact on confidentiality, integrity, and availabi...

CVE-2026-65807

Microsoft Excel is affected by CVE-2026-65807 due to a type confusion in resource access, allowing remote code execution over a network. The vulnerability arises from incompatible type handling in a resource access path within Excel, impacting users of Microsoft Office Excel. The CVSS 3.1 base sc...

CVE-2026-70320

CVE-2026-70320 concerns an issue in Microsoft Office PowerPoint where improper input validation can allow an unauthorized local attacker to disclose information. The affected product is PowerPoint (part of Microsoft Office), and the underlying cause is improper input validation leading to informa...

CVE-2026-50387

CVE-2026-50387 — Windows GDI Elevation of Privilege Affects: Windows GDI subsystem. The vulnerability is a stack-based buffer overflow in GDI that can be triggered by an authorized attacker to achieve local privilege escalation. Impact: Local elevation of privileges with a CVSS v3.1 base score of...

CVE-2026-55134

CVE-2026-55134 is a stack-based buffer overflow in Microsoft Word (Office) that can allow a local attacker to execute arbitrary code. The CVE entry is corroborated by multiple sources in the Connected documents, which identify Word as the affected component and describe local code execution as th...

CVE-2026-64906

CVE-2026-64906 describes a heap-based buffer overflow in Microsoft Office Access that allows an unprivileged, local attacker to execute code. Affected software is Microsoft Office Access; the vulnerability is caused by a heap-based overflow in the handling of certain inputs, enabling arbitrary co...

CVE-2026-68796

CVE-2026-68796 describes a heap-based buffer overflow in Microsoft Excel that can lead to local code execution. Impact per CVSS: HIGH, with local attack vector, required user interaction, and high confidentiality/integrity/availability impact. Affected product is Microsoft Excel; root cause is a ...

CVE-2026-47635

CVE-2026-47635 concerns a type-confusion vulnerability in Microsoft Office components (notably Outlook and Word) that allows an unauthenticated/user-local attacker to execute code locally. The underlying issue is a resource access type mismatch that can lead to remote attack surfaces when process...

CVE-2026-63527

Microsoft Word is affected by CVE-2026-63527 due to a stack-based buffer overflow in Word documents/processing. The vulnerability allows an unauthorized attacker to execute code locally on a system that processes a crafted document, with local attack vector and user interaction required. The CVSS...

CVE-2026-63525

CVE-2026-63525 involves a numeric truncation error in Microsoft Office Word that could allow an attacker to achieve local code execution. The entry specifies a local attack vector with low attack complexity and no privileges required, and user interaction is required. The impact is high on confid...

CVE-2026-63526

CVE-2026-63526 is a stack-based buffer overflow in the Microsoft Office Graphics Component that can allow an attacker with local access to execute code on a vulnerable system. Affected software is Microsoft Office (Graphics Component). The underlying issue is a buffer overflow in the component’s ...

CVE-2026-45474

The documents confirm CVE-2026-45474 is a Microsoft Office vulnerability described as a heap-based buffer overflow that allows an unauthenticated/unauthorized attacker to execute code locally on affected systems. Affected product is Microsoft Office, with the root cause identified as a heap-based...

CVE-2026-63517

CVE-2026-63517 describes an out-of-bounds read in the Microsoft Office Graphics Component that allows a local attacker to disclose information. The affected software is Microsoft Office (Graphics Component). Root cause: out-of-bounds read. Impact: confidentiality impact High; attacker needs local...

CVE-2026-64915

CVE-2026-64915 affects Microsoft Word, with a heap-based buffer overflow that permits local code execution. Exploitation requires local access and user interaction; CVSS v3.1 base score 7.8 (HIGH). A patch/mitigation is available from Microsoft via the MSRC advisory referenced in the entry (updat...

CVE-2026-68795

Microsoft Excel (Office) is affected by a stack-based buffer overflow (CVE-2026-68795) that could allow an attacker to execute code locally. The CVSS v3.1 score is 7.8 (HIGH) with LOCAL attack vector, requiring user interaction. The available documents do not specify a patched version or workarou...

CVE-2026-44818

CVE-2026-44818 affects Microsoft Excel. A integer underflow (wrap/wraparound) in Excel is described as allowing an unauthorized attacker to execute code locally. The associated CVSS 3.1 vector indicates Local attack vector, high impact on confidentiality, integrity, and availability, with High pr...

CVE-2026-45455

CVE-2026-45455 is an Excel information-disclosure vulnerability (out-of-bounds read) in Microsoft Office Excel. The issue allows an unauthorized attacker to disclose information over a network. Multiple connected documents confirm the affected component as Microsoft Excel (Office) and attribute t...

CVE-2026-64908

In CVE-2026-64908, the vulnerability is a heap-based buffer overflow in Microsoft Office Access. The issue affects Access components handling data processing, allowing a local attacker to execute code on the affected system. This is described as a local, user-interaction-requiring flaw with high ...

CVE-2026-63518

CVE-2026-63518 describes a heap-based buffer overflow in Microsoft Office Word that allows an unauthenticated attacker to execute code locally. Affected software: Microsoft Word (Office). Root cause: heap-based overflow in Word’s handling of inputs. Impact: local code execution with high severity...

CVE-2026-55035

CVE-2026-55035 is an information-disclosure vulnerability described as an out-of-bounds read in Microsoft Office that allows a locally authenticated attacker to disclose information. Connected sources confirm this affects multiple Office components (Word, Excel, PowerPoint, SharePoint, etc.) and ...

CVE-2026-63513

CVE-2026-63513 affects Microsoft Office (Graphics Component) via a heap-based buffer overflow that enables local code execution. The CVE is described as a Heap-based buffer overflow in Microsoft Office allowing an unauthorized attacker to execute code locally. CVSS 3.1 indicates LOCAL attack vect...

CVE-2026-68801

CVE-2026-68801 describes a heap-based buffer overflow in Microsoft Excel that could allow an attacker to execute arbitrary code locally. The vulnerability arises from a heap overflow condition within Excel’s handling of certain input, leading to potential code execution with the user’s privileges...

CVE-2026-68793

CVE-2026-68793 involves an out-of-bounds read in Microsoft Office Excel that enables an unauthorized attacker to execute code locally. Affected software: Microsoft Excel. Vulnerable component: Excel handling leading to a out-of-bounds read; root cause stated as such. Impact: local code execution ...

CVE-2026-64907

CVE-2026-64907 describes a stack-based buffer overflow in Microsoft Office Word that enables local code execution by an unauthorized attacker. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL access, REQUIRED user interaction, and HIGH impact on confidentiality, integrity, and availability. The a...

CVE-2026-68809

CVE-2026-68809 describes an information-disclosure flaw in Microsoft Office PowerPoint caused by incomplete cleanup. A local attacker could disclose information due to this cleanup issue. CVSS v3.1: 5.5 (Medium); Vector: Local; Privileges Required: None; User Interaction: Required; Scope: Unchang...

CVE-2026-70328

CVE-2026-70328 affects Microsoft Excel, with an out-of-bounds read that enables information disclosure over a network. The CVSSv3.1 base score is 6.5 (Medium); attack vector Network, attack complexity Low, privileges Required None, user interaction Required; confidentiality impact High. Connected...