Microsoft Office vulnerabilities

149 known CVE vulnerabilities in Microsoft Office, translated and rated.

CVE-2026-80087Medium
Heap-based buffer overflow in Microsoft Office. An unauthorized attacker can disclose information over a network.
CVE-2026-80082Medium
Out-of-bounds read in Microsoft Office. An unauthorized attacker can disclose information over a network.
CVE-2026-80078Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80076Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-78524High
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-78510High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-78505High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-77898High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69739Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69632High
Use-after-free in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69626Medium
A buffer over-read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69442High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69285High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-64918Medium
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-70323Medium
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70317Medium
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70315Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70314Medium
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70130High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-68792High
A command injection vulnerability in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-66809Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-66807High
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65664High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65661High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65657High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65656High
Improper neutralization of special elements used in a command (command injection) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64911High
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64910High
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64909High
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64904High
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64903High
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64899Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-64898High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63533High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63532High
Integer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63529Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63526High
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63524Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63519High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63517Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63515High
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-62842Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56195Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56192Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55140High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.
CVE-2026-55139Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55129High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55125High
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55121Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS