CVE-2026-80076
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Risk Assessment
Similar to other Office vulnerabilities, it could lead to disclosure of sensitive organizational data.
Recommendation
Update Microsoft Office to a patched version immediately.
Other vulnerabilities in Microsoft Office
See all- CVE-2026-42832High
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
- CVE-2026-42831High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-40419High
A use after free vulnerability in Microsoft Office allows an authorized attacker to locally elevate privileges.
- CVE-2026-40363High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-26134High
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.
- CVE-2026-26110High
Microsoft Office has a vulnerability related to resource access using an incompatible type ('type confusion'), allowing an unauthorized attacker to execute code locally.
- CVE-2026-20953High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-20952High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-20943High
An untrusted search path vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-62557High
A use after free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
Original NVD description (English source)
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS