Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product 365 Apps
Total 525 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-55141 1 Microsoft 7 365 Apps, Excel, Microsoft 365 and 4 more 2026-07-15 N/A 7.8 HIGH
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55898 1 Microsoft 7 365 Apps, Excel, Microsoft 365 and 4 more 2026-07-15 N/A 6.1 MEDIUM
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-55947 1 Microsoft 7 365 Apps, Excel, Microsoft 365 and 4 more 2026-07-15 N/A 7.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55949 1 Microsoft 7 365 Apps, Excel, Microsoft 365 and 4 more 2026-07-15 N/A 7.8 HIGH
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-56156 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-07-15 N/A 7.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-55054 2 Apple, Microsoft 8 Macos, 365 Apps, Excel and 5 more 2026-07-15 N/A 6.5 MEDIUM
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-45645 1 Microsoft 6 365 Apps, Microsoft 365, Office 2016 and 3 more 2026-07-09 N/A 7.8 HIGH
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45486 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-07-09 N/A 7.8 HIGH
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45474 1 Microsoft 7 365 Apps, 365 Copilot, Microsoft 365 and 4 more 2026-07-09 N/A 8.4 HIGH
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45472 1 Microsoft 7 365 Apps, 365 Copilot, Microsoft 365 and 4 more 2026-07-09 N/A 8.4 HIGH
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45463 1 Microsoft 7 365 Apps, 365 Copilot, Microsoft 365 and 4 more 2026-07-09 N/A 8.4 HIGH
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45461 1 Microsoft 7 365 Apps, 365 Copilot, Microsoft 365 and 4 more 2026-07-09 N/A 8.4 HIGH
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45460 1 Microsoft 6 365 Apps, 365 Copilot, Microsoft 365 and 3 more 2026-07-09 N/A 4.7 MEDIUM
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-45458 1 Microsoft 7 365 Apps, Microsoft 365, Office 2019 and 4 more 2026-07-09 N/A 8.4 HIGH
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45457 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-07-09 N/A 7.8 HIGH
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45455 1 Microsoft 7 365 Apps, Excel, Microsoft 365 and 4 more 2026-07-09 N/A 3.3 LOW
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-44823 1 Microsoft 7 365 Apps, Excel, Microsoft 365 and 4 more 2026-07-09 N/A 7.8 HIGH
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44820 1 Microsoft 7 365 Apps, Excel, Microsoft 365 and 4 more 2026-07-09 N/A 7.8 HIGH
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44818 1 Microsoft 7 365 Apps, Excel, Microsoft 365 and 4 more 2026-07-09 N/A 7.0 HIGH
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-44817 1 Microsoft 7 365 Apps, Excel, Microsoft 365 and 4 more 2026-07-09 N/A 7.8 HIGH
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.