Search Results (967 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-69922 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 6.5 Medium
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-105716 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105714 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 7.5 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105599 1 Microsoft 6 365 Apps, Office 2021, Office 2024 and 3 more 2026-10-13 7.5 High
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-105598 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105597 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105596 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105595 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 8.8 High
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105593 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105592 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 7.5 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105591 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-102867 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 6.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-102857 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 8.8 High
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
CVE-2026-102856 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 8.8 High
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
CVE-2026-102850 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-13 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2023-35311 1 Microsoft 6 365 Apps, Office, Office 2019 and 3 more 2026-10-08 8.8 High
Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2026-78501 1 Microsoft 2 365 Copilot Business Chat, 365 Copilot Chat 2026-10-07 7.4 High
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.
CVE-2026-70125 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-05 8.8 High
Microsoft Office Outlook Remote Code Execution Vulnerability
CVE-2026-50314 1 Microsoft 12 365 Apps, Microsoft 365, Microsoft Office 365 For Mac and 9 more 2026-09-29 7.8 High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-55024 1 Microsoft 15 365 Apps, Excel, Excel 2016 and 12 more 2026-09-29 7.8 High
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.