365 Apps

CVEs (654)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2026-63525	Microsoft Word	Hig	0.51	7.8	Aug 11, 2026	Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63519	Microsoft Office	Hig	0.51	7.8	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63518	Microsoft Word	Hig	0.51	7.8	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63515	Microsoft Office	Hig	0.51	7.8	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513	Microsoft Office	Hig	0.51	7.8	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-58651	Microsoft Office	Hig	0.51	7.8	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45643	Microsoft Office	Hig	0.51	7.8	Jun 9, 2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45486	Microsoft Office	Hig	0.51	7.8	Jun 9, 2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45469	Microsoft Office	Hig	0.51	7.8	Jun 9, 2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-45457	Microsoft Office	Hig	0.51	7.8	Jun 9, 2026	Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-44824	Microsoft Office	Hig	0.51	7.8	Jun 9, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44820	Microsoft Office	Hig	0.51	7.8	Jun 9, 2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44819	Microsoft Office	Hig	0.51	7.8	Jun 9, 2026	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44817	Microsoft Office	Hig	0.51	7.8	Jun 9, 2026	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-40419	Microsoft Office	Hig	0.51	7.8	May 12, 2026	Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40418	Microsoft Office	Hig	0.51	7.8	May 12, 2026	Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40362	Microsoft Office	Hig	0.51	7.8	May 12, 2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-40360	Microsoft Office	Hig	0.51	7.8	May 12, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-40359	Microsoft Office	Hig	0.51	7.8	May 12, 2026	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-33095	Microsoft Office Word	Hig	0.51	7.8	Apr 14, 2026	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-63525HigAug 11, 2026
Microsoft
Word
risk 0.51cvss 7.8epss 0.00
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63519HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63518HigAug 11, 2026
Microsoft
Word
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63515HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-58651HigAug 11, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45643HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45486HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45469HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-45457HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-44824HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44820HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44819HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44817HigJun 9, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-40419HigMay 12, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40418HigMay 12, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-40362HigMay 12, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-40360HigMay 12, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-40359HigMay 12, 2026
Microsoft
Office
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-33095HigApr 14, 2026
Microsoft
Office Word
risk 0.51cvss 7.8epss 0.00
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Page 8 of 33