Microsoft 365

CVEs (357)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-54988	Microsoft Office	Med	0.40	6.1	0.00	Jul 14, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-97744	Microsoft Office	Med	0.36	5.5	0.00	Oct 13, 2026	Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-97005	Microsoft Office	Med	0.36	5.5	0.00	Oct 13, 2026	Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-85875	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81958	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81401	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81400	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81399	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81395	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81394	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81393	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81392	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81391	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81390	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81387	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-78513	Microsoft Office	Med	0.36	5.5	0.01	Sep 8, 2026	Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-78506	Microsoft Word	Med	0.36	5.5	0.01	Sep 8, 2026	Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70325	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70323	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70322	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-54988MedJul 14, 2026
Microsoft
Office
risk 0.40cvss 6.1epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-97744MedOct 13, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-97005MedOct 13, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-85875MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81958MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81401MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81400MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81399MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81395MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81394MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81393MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81392MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81391MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81390MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-81387MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-78513MedSep 8, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.01
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-78506MedSep 8, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.01
Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70325MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70323MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70322MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Page 13 of 18