Microsoft Office vulnerabilities

129 known CVE vulnerabilities in Microsoft Office, translated and rated.

CVE-2026-68792High
A command injection vulnerability in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-66809Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-66807High
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65664High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65661High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65657High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65656High
Improper neutralization of special elements used in a command (command injection) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64911High
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64910High
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64909High
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64904High
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64903High
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64899Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-64898High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63533High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63532High
Integer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63529Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63526High
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63524Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63519High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63517Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63515High
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-62842Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56195Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56192Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55140High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.
CVE-2026-55139Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55129High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55125High
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55121Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55057Medium
An integer overflow or wraparound vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55056High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.
CVE-2026-55049High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55047Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55045High
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55042Medium
The vulnerability in Microsoft Office involves the use of an uninitialized resource, allowing an unauthorized attacker to disclose information locally.
CVE-2026-55035Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55028Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55027Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55026Medium
An integer overflow or wraparound vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55023Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55022High
A type confusion vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The flaw arises from accessing a resource using an incompatible type.
CVE-2026-55018High
A Use-After-Free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.
CVE-2026-55017High
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted data.
CVE-2026-50665High
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-50467High
A Use-After-Free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.
CVE-2026-50314High
A use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-50301High
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted data.
CVE-2026-47290High
A Use-After-Free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.