Microsoft 365

CVEs (357)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-64915	Microsoft Word	Hig	0.51	7.8	0.00	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64911	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64910	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64909	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64907	Microsoft Word	Hig	0.51	7.8	0.00	Aug 11, 2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64905	Microsoft Word	Hig	0.51	7.8	0.00	Aug 11, 2026	Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64904	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64903	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64898	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63533	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63532	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63527	Microsoft Word	Hig	0.51	7.8	0.00	Aug 11, 2026	Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63526	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63519	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63518	Microsoft Word	Hig	0.51	7.8	0.00	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63515	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-58651	Microsoft Office	Hig	0.51	7.8	0.00	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55125	Microsoft Office	Hig	0.51	7.8	0.01	Jul 14, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-50387	Microsoft Office	Hig	0.51	7.8	0.00	Jul 14, 2026	Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

CVE-2026-64915HigAug 11, 2026
Microsoft
Word
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64911HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64910HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64909HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64907HigAug 11, 2026
Microsoft
Word
risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64905HigAug 11, 2026
Microsoft
Word
risk 0.51cvss 7.8epss 0.00
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64904HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64903HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64898HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63533HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63532HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63527HigAug 11, 2026
Microsoft
Word
risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63526HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63519HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63518HigAug 11, 2026
Microsoft
Word
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63515HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-58651HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55125HigJul 14, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-50387HigJul 14, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

Page 9 of 18