Office

CVEs (1,301)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-40419	Microsoft Office	Hig	0.51	7.8	0.00	May 12, 2026	Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40418	Microsoft Office	Hig	0.51	7.8	0.00	May 12, 2026	Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40362	Microsoft Office	Hig	0.51	7.8	0.00	May 12, 2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-40360	Microsoft Office	Hig	0.51	7.8	0.00	May 12, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-40359	Microsoft Office	Hig	0.51	7.8	0.00	May 12, 2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32200	Microsoft Office	Hig	0.51	7.8	0.00	Apr 14, 2026	Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-32199	Microsoft Office	Hig	0.51	7.8	0.00	Apr 14, 2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32198	Microsoft Office	Hig	0.51	7.8	0.00	Apr 14, 2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32197	Microsoft Office	Hig	0.51	7.8	0.00	Apr 14, 2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32189	Microsoft Office	Hig	0.51	7.8	0.00	Apr 14, 2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-26134	Microsoft Office	Hig	0.51	7.8	0.00	Mar 10, 2026	Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-26112	Microsoft Office	Hig	0.51	7.8	0.00	Mar 10, 2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-26108	Microsoft Office	Hig	0.51	7.8	0.00	Mar 10, 2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-26107	Microsoft Office	Hig	0.51	7.8	0.00	Mar 10, 2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-21259	Microsoft Office	Hig	0.51	7.8	0.01	Feb 10, 2026	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally.
CVE-2026-20957	Microsoft Office	Hig	0.51	7.8	0.00	Jan 13, 2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20956	Microsoft Office Excel	Hig	0.51	7.8	0.00	Jan 13, 2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20955	Microsoft Office	Hig	0.51	7.8	0.01	Jan 13, 2026	Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20950	Microsoft Office	Hig	0.51	7.8	0.00	Jan 13, 2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20949	Microsoft Office Excel	Hig	0.51	7.8	0.00	Jan 13, 2026	Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-40419HigMay 12, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40418HigMay 12, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40362HigMay 12, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-40360HigMay 12, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-40359HigMay 12, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32200HigApr 14, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-32199HigApr 14, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32198HigApr 14, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32197HigApr 14, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32189HigApr 14, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-26134HigMar 10, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-26112HigMar 10, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-26108HigMar 10, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-26107HigMar 10, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-21259HigFeb 10, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.01
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally.
CVE-2026-20957HigJan 13, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20956HigJan 13, 2026
Microsoft
Office Excel
risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20955HigJan 13, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.01
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20950HigJan 13, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20949HigJan 13, 2026
Microsoft
Office Excel
risk 0.51cvss 7.8epss 0.00
Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

Page 19 of 66