Microsoft 365

CVEs (357)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-108436	Microsoft Office	Med	0.42	6.5	0.01	Oct 15, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108435	Microsoft Office	Med	0.42	6.5	0.01	Oct 15, 2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108434	Microsoft Office	Med	0.42	6.5	0.01	Oct 15, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-97779	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97760	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97743	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97740	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88192	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88184	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88183	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88175	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88169	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88167	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88154	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70263	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70206	Microsoft Office	Med	0.42	6.5	0.01	Oct 13, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80091	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80090	Microsoft Word	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80089	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80088	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-108436MedOct 15, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108435MedOct 15, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108434MedOct 15, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-97779MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97760MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97743MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97740MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88192MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88184MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88183MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88175MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88169MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88167MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88154MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70263MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70206MedOct 13, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80091MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80090MedSep 8, 2026
Microsoft
Word
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-80089MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80088MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Page 11 of 18