Office
by Microsoft
CVEs (1,270)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-55018 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-55017 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-54131 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-50665 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | ||
| CVE-2026-50467 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-50408 | Med | 0.00 | 5.5 | 0.00 | Jul 14, 2026 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||
| CVE-2026-50387 | Hig | 0.00 | 7.8 | 0.02 | Jul 14, 2026 | Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-50314 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-50301 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-48580 | Med | 0.00 | 5.5 | 0.00 | Jul 14, 2026 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||
| CVE-2026-47642 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-47290 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-58618 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-56193 | Hig | 0.00 | 7.1 | 0.00 | Jul 14, 2026 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | ||
| CVE-2026-55948 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-55899 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-54988 | Med | 0.00 | 6.1 | 0.00 | Jul 14, 2026 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||
| CVE-2026-50678 | Med | 0.00 | 6.6 | 0.00 | Jul 14, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||
| CVE-2026-50675 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||
| CVE-2013-3859 | 0.00 | — | 0.02 | Sep 11, 2013 | Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability." |
- risk 0.00cvss 7.8epss 0.00
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- risk 0.00cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- risk 0.00cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- risk 0.00cvss 7.8epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- risk 0.00cvss 7.8epss 0.00
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- risk 0.00cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- risk 0.00cvss 7.8epss 0.02
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
- risk 0.00cvss 7.8epss 0.00
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- risk 0.00cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- risk 0.00cvss 5.5epss 0.00
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- risk 0.00cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- risk 0.00cvss 7.8epss 0.00
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- risk 0.00cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- risk 0.00cvss 7.1epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- risk 0.00cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- risk 0.00cvss 7.8epss 0.00
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- risk 0.00cvss 6.1epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- risk 0.00cvss 6.6epss 0.00
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- risk 0.00cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2013-3859Sep 11, 2013risk 0.00cvss —epss 0.02
Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."
Page 63 of 64