Search Results (1776 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-108453 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 6.5 Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108454 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-16 6.5 Medium
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88203 1 Microsoft 6 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office Ltsc 2021 and 3 more 2026-10-15 6.5 Medium
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88175 1 Microsoft 10 365, 365 Apps, Microsoft 365 and 7 more 2026-10-15 6.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88167 1 Microsoft 13 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 10 more 2026-10-15 6.5 Medium
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2018-0851 1 Microsoft 3 Office, Office Word Viewer, Outlook 2026-10-15 N/A
Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.
CVE-2026-96996 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 7.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-96995 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 7.8 High
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
CVE-2026-88197 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-85340 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 7.8 High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-70276 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 7 High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-102856 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
CVE-2026-70215 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 8.8 High
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-88178 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 9.8 Critical
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-88183 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 6.5 Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88207 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 7.5 High
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2017-8512 1 Microsoft 7 Office, Office Online Server, Office Web Apps and 4 more 2026-10-15 N/A
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-0260, and CVE-2017-8506.
CVE-2026-70242 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 9.8 Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70256 1 Microsoft 2 365 Apps, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70257 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.