Search Results (832 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-78506 1 Microsoft 18 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 15 more 2026-09-27 5.5 Medium
Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-69686 1 Microsoft 18 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 15 more 2026-09-27 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80078 1 Microsoft 15 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 12 more 2026-09-27 6.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-100208 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-09-26 7.5 High
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70125 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-09-26 8.8 High
Microsoft Office Outlook Remote Code Execution Vulnerability
CVE-2026-78510 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-09-25 8.4 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-85885 1 Microsoft 1 365 Copilot 2026-09-25 9.9 Critical
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
CVE-2026-78512 1 Microsoft 12 365 Apps, Microsoft 365, Microsoft Office Ltsc For Mac 2021 and 9 more 2026-09-24 8.8 High
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-85887 1 Microsoft 1 365 Copilot 2026-09-19 7.7 High
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
CVE-2026-78501 1 Microsoft 1 365 Copilot Business Chat 2026-09-18 7.4 High
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.
CVE-2026-69739 1 Microsoft 8 365 Apps, Office 2016, Office 2019 and 5 more 2026-09-17 6.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-81950 1 Microsoft 12 365, 365 Apps, Excel and 9 more 2026-09-14 7.8 High
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81953 1 Microsoft 14 365 Apps, Excel, Excel 2016 and 11 more 2026-09-14 7.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-77898 1 Microsoft 16 365, 365 Apps, Microsoft 365 and 13 more 2026-09-14 7.5 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-81392 1 Microsoft 12 365 Apps, Excel, Excel 2016 and 9 more 2026-09-14 5.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-78505 1 Microsoft 10 365 Apps, Microsoft 365, Microsoft Office 365 For Mac and 7 more 2026-09-14 8.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-78504 1 Microsoft 13 365, 365 Apps, Microsoft 365 and 10 more 2026-09-14 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69719 1 Microsoft 18 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 15 more 2026-09-14 6.5 Medium
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80087 1 Microsoft 11 365, 365 Apps, Microsoft 365 and 8 more 2026-09-13 6.5 Medium
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80088 1 Microsoft 17 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 14 more 2026-09-13 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.