Microsoft 365

CVEs (357)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-69722	Microsoft Word	Hig	0.57	8.8	0.01	Sep 8, 2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69686	Microsoft Word	Hig	0.57	8.8	0.01	Sep 8, 2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69678	Microsoft Office	Hig	0.57	8.8	0.01	Sep 8, 2026	Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-69671	Microsoft Word	Hig	0.57	8.8	0.01	Sep 8, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69632	Microsoft Office	Hig	0.57	8.8	0.01	Sep 8, 2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69556	Microsoft Word	Hig	0.57	8.8	0.01	Sep 8, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-65807	Microsoft Office	Hig	0.57	8.8	0.01	Aug 11, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-78510	Microsoft Office	Hig	0.55	8.4	0.00	Sep 8, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45458	Microsoft Office	Hig	0.55	8.4	0.00	Jun 9, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45456	Microsoft Office	Hig	0.55	8.4	0.00	Jun 9, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-88185	Microsoft Office	Hig	0.53	8.1	0.01	Oct 13, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70269	Microsoft Office	Hig	0.53	8.1	0.01	Oct 13, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-44822	Microsoft Office	Hig	0.53	8.2	0.01	Jun 9, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-108433	Microsoft Office	Hig	0.51	7.8	0.00	Oct 15, 2026	Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-97001	Microsoft Office	Hig	0.51	7.8	0.00	Oct 13, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-96997	Microsoft Office	Hig	0.51	7.8	0.00	Oct 13, 2026	Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.
CVE-2026-96995	Microsoft Office	Hig	0.51	7.8	0.00	Oct 13, 2026	Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
CVE-2026-88210	Microsoft Office	Hig	0.51	7.8	0.00	Oct 13, 2026	Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-70220	Microsoft Office	Hig	0.51	7.8	0.00	Oct 13, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-81960	Microsoft Office	Hig	0.51	7.8	0.00	Sep 8, 2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-69722HigSep 8, 2026
Microsoft
Word
risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69686HigSep 8, 2026
Microsoft
Word
risk 0.57cvss 8.8epss 0.01
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69678HigSep 8, 2026
Microsoft
Office
risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-69671HigSep 8, 2026
Microsoft
Word
risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69632HigSep 8, 2026
Microsoft
Office
risk 0.57cvss 8.8epss 0.01
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-69556HigSep 8, 2026
Microsoft
Word
risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-65807HigAug 11, 2026
Microsoft
Office
risk 0.57cvss 8.8epss 0.01
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-78510HigSep 8, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45458HigJun 9, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45456HigJun 9, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-88185HigOct 13, 2026
Microsoft
Office
risk 0.53cvss 8.1epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70269HigOct 13, 2026
Microsoft
Office
risk 0.53cvss 8.1epss 0.01
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-44822HigJun 9, 2026
Microsoft
Office
risk 0.53cvss 8.2epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-108433HigOct 15, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-97001HigOct 13, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-96997HigOct 13, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.
CVE-2026-96995HigOct 13, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
CVE-2026-88210HigOct 13, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-70220HigOct 13, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-81960HigSep 8, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Page 6 of 18