CVE-2026-55040

CVE-2026-55040 is a SharePoint Server vulnerability described as a security feature bypass caused by weak authentication. The affected products mentioned in the connected documents are SharePoint Server Subscription Edition, as well as SharePoint Server 2019 and 2016. Patch guidance is present in...

CVE-2026-55130

CVE-2026-55130 describes a heap-based buffer overflow in Microsoft Word (Office) that allows an authenticated attacker to achieve local code execution . The CVE entry lists a LOCAL attack vector, with user interaction required and high impact on confidentiality, integrity, and availability. Conne...

CVE-2026-55135

CVE-2026-55135 concerns a cross-site scripting spoofing vulnerability in Microsoft Office SharePoint. The connected sources identify the affected product as Microsoft SharePoint Server (part of Office/SharePoint), and describe the root cause as improper neutralization of input during web page gen...

CVE-2026-55021

CVE-2026-55021 affects Microsoft SharePoint Server (Office/SharePoint component). The issue is caused by improper neutralization of input during web page generation, enabling an authorized attacker to spoof over the network via a malicious link or page. The CVSSv3.1 score is 7.3 (High) with Netwo...

CVE-2026-55027

CVE-2026-55027 is a Microsoft Office information-disclosure vulnerability described as an out-of-bounds read that can disclose local information. The CVE entry notes a local attacker with no privileges can trigger the issue, requiring user interaction (per CVSS: AV:L/AC:L/PR:N/UI:R). Connected so...

CVE-2026-55052

CVE-2026-55052 concerns a privilege-elevation flaw in Microsoft SharePoint (Office SharePoint). The description across sources is a missing authorization vulnerability that could let an authorized attacker elevate privileges over a network. Affected components/versions are centered on Microsoft O...

CVE-2026-55126

CVE-2026-55126 concerns Microsoft Office SharePoint (SharePoint Server) with an XSS flaw described as improper neutralization of input during web page generation, enabling an authorized attacker to perform spoofing over a network. The CVSS 3.1 base metrics: AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N, ba...

CVE-2026-55132

Microsoft Word/Office vulnerability CVE-2026-55132 involves a double-free in Word that could allow a local attacker to execute arbitrary code. Affected product: Microsoft Word (Office suite). Root cause: memory management flaw (double free) in Word’s handling of certain documents. Impact: local c...

CVE-2026-55026

CVE-2026-55026 is an Office-related vulnerability caused by an integer overflow/wraparound in Microsoft Office that enables local information disclosure. Affected: Microsoft Office components; root cause per the CVE entry is integer overflow. Impact per NVD: Confidentiality impact HIGH, no integr...

CVE-2026-55034

CVE-2026-55034 affects Microsoft Office SharePoint (SharePoint Server) and is triggered by improper neutralization of input during web page generation, enabling an authorized attacker to spoof over a network. The CVSS 3.1 base score is 7.3 (HIGH): network attack vector, low attack complexity, pri...

CVE-2026-55038

CVE-2026-55038 is a stack-based buffer overflow in Microsoft Word (Office) that can allow local code execution. The vulnerability affects Word and is exploitable by a crafted file opened by a user with no privileges required, though user interaction is needed (per CVSS: LOCAL, UI: REQUIRED, Privi...

CVE-2026-55051

CVE-2026-55051 is a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Office SharePoint that allows an authorized attacker to disclose information over a network. The CVE is documented with CVSS v3.1 base score 6.5 (MEDIUM), network attack vector, low attack complexity, privileges req...

CVE-2026-55045

CVE-2026-55045 is an Office remote code execution vulnerability described as an out-of-bounds read in Microsoft Office that could enable a local attacker to execute code. Connected sources tie this CVE to Microsoft Office components (Word/PowerPoint/SharePoint) with local-exploit prerequisites an...

CVE-2026-55128

CVE-2026-55128 is a Use-after-free in Microsoft Word that enables local code execution by an unauthenticated attacker who powers the exploit via a crafted file/link. Affected product scope is Microsoft Word/Office as per Microsoft advisories; document does not specify exact vulnerable builds or p...

CVE-2026-55055

CVE-2026-55055 is a stack-based buffer overflow in Microsoft Word (part of Microsoft Office) that enables a local attacker to execute code. The vulnerability affects Word components and is documented with a CVSS 3.1 base score of 7.8 (High) with Local attack vector, user interaction required, and...

CVE-2026-55030

CVE-2026-55030 affects Microsoft Office SharePoint (Server). The vulnerability is caused by improper neutralization of input during web page generation, enabling spoofing over a network by an authorized attacker. The associated CVSS 3.1 base score is 4.6 (Medium) with network access, low attack c...

CVE-2026-55050

CVE-2026-55050 is a Microsoft Word vulnerability: an out-of-bounds read could allow a local attacker to disclose information. Affected software is Microsoft Word (Office suite). Root cause is an out-of-bounds read in Word, enabling local information disclosure. Base CVSS 3.1 score is 5.5 (Medium)...

CVE-2026-55125

CVE-2026-55125 is a Microsoft Office heap-based buffer overflow that enables local code execution. The NVD entry reports a CVSS v3.1 base score of 7.8 (LOCAL, HIGH impact across confidentiality, integrity, and availability) with user interaction required. Connected sources corroborate Office-wide...