CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-108449
High

A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

CVE-2026-108448
High

A heap-based buffer overflow in Microsoft Office Outlook allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

CVE-2026-108447
High

A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

CVE-2026-108446
High

A use-after-free vulnerability in Microsoft Office Excel allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

CVE-2026-108445
High

A stack-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

CVE-2026-108444
High

A heap-based buffer overflow in Microsoft Office allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

CVE-2026-108443
High

An off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw stems from an incorrect buffer size calculation by one byte.

CVE-2026-108442
High

A use-after-free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw involves accessing memory after it has been freed.

CVE-2026-108441
High

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.

CVE-2026-108440
High

A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated stack memory region.

CVE-2026-108439
High

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.

CVE-2026-108438
Medium

Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-108437
High

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.

CVE-2026-108436
Medium

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-108435
Medium

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-108434
Medium

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-108433
High

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. The flaw involves making security decisions based on data that cannot be trusted.

CVE-2026-108432
High

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.

CVE-2026-108431
High

A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated stack memory region.

CVE-2026-108430
High

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS