Microsoft 365

CVEs (357)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-45643	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45486	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45469	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-45457	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-44824	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44820	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44819	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44817	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-108448	Microsoft Office	Hig	0.49	7.5	0.00	Oct 15, 2026	Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-88207	Microsoft Office	Hig	0.49	7.5	0.01	Oct 13, 2026	Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-70281	Microsoft Office	Hig	0.49	7.5	0.01	Oct 13, 2026	Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-105715	Microsoft Office	Hig	0.49	7.5	0.01	Oct 13, 2026	Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-105599	Microsoft Office	Hig	0.49	7.5	0.01	Oct 13, 2026	Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-77898	Microsoft Office	Hig	0.49	7.5	0.01	Sep 8, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-81389	Microsoft Office	Hig	0.46	7.0	0.00	Sep 8, 2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44818	Microsoft Office	Hig	0.46	7.0	0.00	Jun 9, 2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-108455	Microsoft Office	Med	0.42	6.5	0.01	Oct 15, 2026	Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108454	Microsoft Office	Med	0.42	6.5	0.01	Oct 15, 2026	Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108453	Microsoft Office	Med	0.42	6.5	0.01	Oct 15, 2026	Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108438	Microsoft Office	Med	0.42	6.5	0.01	Oct 15, 2026	Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-45643HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45486HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45469HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-45457HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-44824HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44820HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44819HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44817HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-108448HigOct 15, 2026
Microsoft
Office
risk 0.49cvss 7.5epss 0.00
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-88207HigOct 13, 2026
Microsoft
Office
risk 0.49cvss 7.5epss 0.01
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-70281HigOct 13, 2026
Microsoft
Office
risk 0.49cvss 7.5epss 0.01
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-105715HigOct 13, 2026
Microsoft
Office
risk 0.49cvss 7.5epss 0.01
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-105599HigOct 13, 2026
Microsoft
Office
risk 0.49cvss 7.5epss 0.01
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-77898HigSep 8, 2026
Microsoft
Office
risk 0.49cvss 7.5epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-81389HigSep 8, 2026
Microsoft
Office
risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44818HigJun 9, 2026
Microsoft
Office
risk 0.46cvss 7.0epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-108455MedOct 15, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108454MedOct 15, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108453MedOct 15, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108438MedOct 15, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Page 10 of 18