Office

CVEs (1,321)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-45461	Microsoft Office	Hig	0.55	8.4	0.00	Jun 9, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45458	Microsoft Office	Hig	0.55	8.4	0.00	Jun 9, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45456	Microsoft Office	Hig	0.55	8.4	0.00	Jun 9, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40367	Microsoft Word	Hig	0.55	8.4	0.00	May 12, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40366	Microsoft Word	Hig	0.55	8.4	0.00	May 12, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40364	Microsoft Word	Hig	0.55	8.4	0.04	May 12, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40363	Microsoft Office	Hig	0.55	8.4	0.00	May 12, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40361	Microsoft Office	Hig	0.55	8.4	0.01	May 12, 2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40358	Microsoft Office	Hig	0.55	8.4	0.00	May 12, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-32190	Microsoft Office	Hig	0.55	8.4	0.00	Apr 14, 2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-26113	Microsoft Office	Hig	0.55	8.4	0.01	Mar 10, 2026	Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-26110	Microsoft Office	Hig	0.55	8.4	0.00	Mar 10, 2026	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-26109	Microsoft Office	Hig	0.55	8.4	0.00	Mar 10, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20953	Microsoft Office	Hig	0.55	8.4	0.01	Jan 13, 2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-20952	Microsoft Office	Hig	0.55	8.4	0.01	Jan 13, 2026	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62557	Microsoft Office	Hig	0.55	8.4	0.00	Dec 9, 2025	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62554	Microsoft Office	Hig	0.55	8.4	0.00	Dec 9, 2025	Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59236	Microsoft Office	Hig	0.55	8.4	0.00	Oct 14, 2025	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54910	Microsoft Office	Hig	0.55	8.4	0.01	Sep 9, 2025	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-53784	Microsoft Office Word	Hig	0.55	8.4	0.00	Aug 12, 2025	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-45461HigJun 9, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45458HigJun 9, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45456HigJun 9, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40367HigMay 12, 2026
Microsoft
Word
risk 0.55cvss 8.4epss 0.00
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40366HigMay 12, 2026
Microsoft
Word
risk 0.55cvss 8.4epss 0.00
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40364HigMay 12, 2026
Microsoft
Word
risk 0.55cvss 8.4epss 0.04
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40363HigMay 12, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40361HigMay 12, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.01
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40358HigMay 12, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-32190HigApr 14, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-26113HigMar 10, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.01
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-26110HigMar 10, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-26109HigMar 10, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20953HigJan 13, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.01
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-20952HigJan 13, 2026
Microsoft
Office
risk 0.55cvss 8.4epss 0.01
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62557HigDec 9, 2025
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62554HigDec 9, 2025
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59236HigOct 14, 2025
Microsoft
Office
risk 0.55cvss 8.4epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54910HigSep 9, 2025
Microsoft
Office
risk 0.55cvss 8.4epss 0.01
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-53784HigAug 12, 2025
Microsoft
Office Word
risk 0.55cvss 8.4epss 0.00
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Page 8 of 67