Total
936 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-70268 | 1 Microsoft | 4 365 Apps, Microsoft 365, Office 2021 and 1 more | 2026-10-15 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-70263 | 1 Microsoft | 4 365 Apps, Microsoft 365, Office 2021 and 1 more | 2026-10-15 | N/A | 6.5 MEDIUM |
| Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-70254 | 1 Microsoft | 4 365 Apps, Microsoft 365, Office 2021 and 1 more | 2026-10-15 | N/A | 8.8 HIGH |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-70220 | 1 Microsoft | 4 365 Apps, Microsoft 365, Office 2021 and 1 more | 2026-10-15 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-70215 | 1 Microsoft | 4 365 Apps, Microsoft 365, Office 2021 and 1 more | 2026-10-15 | N/A | 8.8 HIGH |
| Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-70206 | 1 Microsoft | 4 365 Apps, Microsoft 365, Office 2021 and 1 more | 2026-10-15 | N/A | 6.5 MEDIUM |
| Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-105718 | 1 Microsoft | 5 365 Apps, Microsoft 365, Office 2021 and 2 more | 2026-10-15 | N/A | 8.8 HIGH |
| Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-105715 | 1 Microsoft | 4 365 Apps, Microsoft 365, Office 2021 and 1 more | 2026-10-15 | N/A | 7.5 HIGH |
| Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-105599 | 1 Microsoft | 4 365 Apps, Microsoft 365, Office 2021 and 1 more | 2026-10-15 | N/A | 7.5 HIGH |
| Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-100212 | 1 Microsoft | 5 365 Apps, Microsoft 365, Office 2021 and 2 more | 2026-10-15 | N/A | 8.8 HIGH |
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-100211 | 1 Microsoft | 4 365 Apps, Microsoft 365, Office 2021 and 1 more | 2026-10-15 | N/A | 8.8 HIGH |
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-100210 | 1 Microsoft | 5 365 Apps, Microsoft 365, Office 2021 and 2 more | 2026-10-15 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-100209 | 1 Microsoft | 4 365 Apps, Microsoft 365, Office 2021 and 1 more | 2026-10-15 | N/A | 8.8 HIGH |
| Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-97774 | 1 Microsoft | 1 365 Apps | 2026-10-15 | N/A | 7.0 HIGH |
| Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-96996 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-88109 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | N/A | 7.8 HIGH |
| Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-85340 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | N/A | 7.8 HIGH |
| Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-70276 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | N/A | 7.0 HIGH |
| Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-102857 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-102856 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. | |||||
