Microsoft Office vulnerabilities

159 known CVE vulnerabilities in Microsoft Office, translated and rated.

CVE-2026-80078Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80076Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-78524High
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-78510High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-78505High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-77898High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69739Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69632High
Use-after-free in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69626Medium
A buffer over-read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69442High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69285High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-64918Medium
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-70323Medium
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70317Medium
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70315Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70314Medium
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70130High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-68792High
A command injection vulnerability in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-66809Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-66807High
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65664High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65661High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65657High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65656High
Improper neutralization of special elements used in a command (command injection) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64911High
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64910High
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64909High
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64904High
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64903High
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64899Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-64898High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63533High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63532High
Integer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63529Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63526High
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63524Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63519High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63517Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63515High
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-62842Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56195Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-56192Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55140High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.
CVE-2026-55139Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55129High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55125High
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55121Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55057Medium
An integer overflow or wraparound vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-55056High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS