microsoft 365 apps vulnerabilities, newest first, page 8

By year: all 2026 2025 2024 2023 2022 2021

1. 7.8CVE-2026-64919EPSS 0.5%2026-08-11

   Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

2. 5.5CVE-2026-64917EPSS 0.5%2026-08-11

   Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

3. 7.8CVE-2026-64915EPSS 0.5%2026-08-11

   Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

4. 7.8CVE-2026-64914EPSS 0.5%2026-08-11

   Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

5. 7.8CVE-2026-64912EPSS 0.5%2026-08-11

   Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

6. 7.8CVE-2026-64911EPSS 0.5%2026-08-11

   Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.

7. 7.8CVE-2026-64910EPSS 0.5%2026-08-11

   Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

8. 7.8CVE-2026-64909EPSS 0.5%2026-08-11

   Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.

9. 7.8CVE-2026-64908EPSS 0.5%2026-08-11

   Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

10. 7.8CVE-2026-64907EPSS 0.5%2026-08-11

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

11. 7.8CVE-2026-64906EPSS 0.5%2026-08-11

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

12. 7.8CVE-2026-64905EPSS 0.5%2026-08-11

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

13. 7.8CVE-2026-64904EPSS 0.5%2026-08-11

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

14. 7.8CVE-2026-64903EPSS 0.5%2026-08-11

    Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.

15. 5.5CVE-2026-64899EPSS 0.5%2026-08-11

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

16. 7.8CVE-2026-64898EPSS 0.5%2026-08-11

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

17. 7.8CVE-2026-63533EPSS 0.5%2026-08-11

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

18. 7.8CVE-2026-63532EPSS 0.5%2026-08-11

    Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.

19. 5.5CVE-2026-63531EPSS 0.5%2026-08-11

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

20. 5.5CVE-2026-63530EPSS 0.5%2026-08-11

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

21. 5.5CVE-2026-63529EPSS 0.5%2026-08-11

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

22. 5.5CVE-2026-63528EPSS 0.5%2026-08-11

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

23. 7.8CVE-2026-63527EPSS 0.5%2026-08-11

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

24. 7.8CVE-2026-63526EPSS 0.5%2026-08-11

    Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

25. 7.8CVE-2026-63525EPSS 0.5%2026-08-11

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.

26. 5.5CVE-2026-63524EPSS 0.5%2026-08-11

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

27. 5.5CVE-2026-63521EPSS 0.4%2026-08-11

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

28. 7.8CVE-2026-63519EPSS 0.5%2026-08-11

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

29. 7.8CVE-2026-63518EPSS 0.5%2026-08-11

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

30. 5.5CVE-2026-63517EPSS 0.5%2026-08-11

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

31. 7.8CVE-2026-63515EPSS 0.5%2026-08-11

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

32. 7.8CVE-2026-63513EPSS 0.5%2026-08-11

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

33. 4.3CVE-2026-62882EPSS 0.7%2026-08-11

    Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

34. 5.5CVE-2026-62842EPSS 0.5%2026-08-11

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

35. 7.8CVE-2026-58651EPSS 0.5%2026-08-11

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

36. 8.8CVE-2026-62870EPSS 0.8%2026-08-04

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

37. 5.5CVE-2026-56195EPSS 0.5%2026-07-14

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

38. 5.5CVE-2026-56192EPSS 0.6%2026-07-14

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

39. 7.8CVE-2026-56156EPSS 0.5%2026-07-14

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

40. 7.8CVE-2026-55949EPSS 0.5%2026-07-14

    Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

41. 7.8CVE-2026-55947EPSS 0.5%2026-07-14

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

42. 7.1CVE-2026-55898EPSS 0.5%2026-07-14

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

43. 5.5CVE-2026-55142EPSS 0.6%2026-07-14

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

44. 7.8CVE-2026-55141EPSS 0.5%2026-07-14

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

45. 7.8CVE-2026-55140EPSS 0.5%2026-07-14

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

46. 3.3CVE-2026-55139EPSS 0.5%2026-07-14

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

47. 5.5CVE-2026-55138EPSS 0.5%2026-07-14

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

48. 7.8CVE-2026-55137EPSS 0.5%2026-07-14

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

49. 7.8CVE-2026-55136EPSS 0.5%2026-07-14

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

50. 7.8CVE-2026-55134EPSS 0.6%2026-07-14

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.