Microsoft 365

CVEs (357)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-80087	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80086	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-80082	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80078	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80076	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-78520	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78515	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-78503	Microsoft Word	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78502	Microsoft Word	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-77911	Microsoft Word	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-72977	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-72975	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-72974	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-72938	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-69734	Microsoft Word	Med	0.42	6.5	0.01	Sep 8, 2026	Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69719	Microsoft Word	Med	0.42	6.5	0.01	Sep 8, 2026	Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69626	Microsoft Office	Med	0.42	6.5	0.01	Sep 8, 2026	Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-70105	Microsoft Word	Med	0.42	6.5	0.01	Aug 20, 2026	Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70328	Microsoft Office	Med	0.42	6.5	0.01	Aug 11, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70327	Microsoft Office	Med	0.42	6.5	0.01	Aug 11, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-80087MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80086MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-80082MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80078MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-80076MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-78520MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78515MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-78503MedSep 8, 2026
Microsoft
Word
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78502MedSep 8, 2026
Microsoft
Word
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-77911MedSep 8, 2026
Microsoft
Word
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-72977MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-72975MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-72974MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-72938MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-69734MedSep 8, 2026
Microsoft
Word
risk 0.42cvss 6.5epss 0.01
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69719MedSep 8, 2026
Microsoft
Word
risk 0.42cvss 6.5epss 0.01
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69626MedSep 8, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-70105MedAug 20, 2026
Microsoft
Word
risk 0.42cvss 6.5epss 0.01
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70328MedAug 11, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70327MedAug 11, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Page 12 of 18