Microsoft 365

CVEs (159)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-63526	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63519	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63518	Microsoft Word	Hig	0.51	7.8	0.00	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63515	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-58651	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45643	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45486	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45469	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-45457	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-44824	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44820	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44819	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44817	Microsoft Office	Hig	0.51	7.8	0.00	Jun 9, 2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44818	Microsoft Office	Hig	0.46	7.0	0.00	Jun 9, 2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-70328	Microsoft Office	Med	0.42	6.5	0.01	Aug 11, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70327	Microsoft Office	Med	0.42	6.5	0.01	Aug 11, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70325	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70323	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70322	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-63526HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63519HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63518HigAug 11, 2026
Microsoft
Word
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63515HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-58651HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45643HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45486HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45469HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-45457HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-44824HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44820HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44819HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44817HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44818HigJun 9, 2026
Microsoft
Office
risk 0.46cvss 7.0epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-70328MedAug 11, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70327MedAug 11, 2026
Microsoft
Office
risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70325MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70323MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70322MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Page 3 of 8