Search Results (1171 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-123375 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-11 8.8 High
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-120791 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120790 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120789 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120788 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120786 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120785 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-120005 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-119986 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-124229 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 6.6 Medium
Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-124228 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-11 8.8 High
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook allows an authorized attacker to execute code over a network.
CVE-2026-124227 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-11 7.5 High
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-122198 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-11-11 8.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-113759 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-11-11 7.8 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-69767 1 Microsoft 17 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 14 more 2026-11-10 8.8 High
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-50301 1 Microsoft 5 365 Apps, Office 2016, Office 2019 and 2 more 2026-11-10 8.4 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-68798 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-11-10 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68807 1 Microsoft 17 365 Apps, Excel, Excel 2016 and 14 more 2026-11-10 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68800 1 Microsoft 17 365 Apps, Excel, Excel 2016 and 14 more 2026-11-10 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-97781 1 Microsoft 1 365 Apps 2026-11-10 8.8 High
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.