microsoft microsoft 365 vulnerabilities, newest first, page 8

By year: all 2026 2025 2024 2023 2022 2021

1. 7.8CVE-2026-55022EPSS 0.5%2026-07-14

   Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

2. 7.8CVE-2026-55018EPSS 0.5%2026-07-14

   Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

3. 7.8CVE-2026-54131EPSS 0.5%2026-07-14

   Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

4. 3.3CVE-2026-50665EPSS 0.5%2026-07-14

   Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

5. 7.8CVE-2026-50467EPSS 0.5%2026-07-14

   Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

6. 5.5CVE-2026-50408EPSS 0.5%2026-07-14

   Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

7. 7.8CVE-2026-50387EPSS 0.3%2026-07-14

   Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

8. 7.8CVE-2026-50314EPSS 0.5%2026-07-14

   Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

9. 5.5CVE-2026-48580EPSS 0.5%2026-07-14

   Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

10. 7.8CVE-2026-47642EPSS 0.5%2026-07-14

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

11. 7.8CVE-2026-58618EPSS 0.5%2026-07-14

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

12. 3.3CVE-2026-56193EPSS 0.5%2026-07-14

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

13. 7.8CVE-2026-55948EPSS 0.5%2026-07-14

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

14. 7.8CVE-2026-55899EPSS 0.5%2026-07-14

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

15. 6.1CVE-2026-54988EPSS 0.5%2026-07-14

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

16. 3.3CVE-2026-50678EPSS 0.5%2026-07-14

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

17. 7.8CVE-2026-50675EPSS 0.5%2026-07-14

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

18. 7.8CVE-2026-45645EPSS 0.4%2026-06-09

    Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

19. 7.8CVE-2026-45643EPSS 0.4%2026-06-09

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

20. 7.8CVE-2026-45486EPSS 0.4%2026-06-09

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

21. 3.3CVE-2026-45485EPSS 0.4%2026-06-09

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

22. 7.8CVE-2026-45475EPSS 0.5%2026-06-09

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

23. 8.4CVE-2026-45474EPSS 0.4%2026-06-09

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

24. 8.4CVE-2026-45472EPSS 0.4%2026-06-09

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

25. 7.8CVE-2026-45471EPSS 0.5%2026-06-09

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

26. 7.8CVE-2026-45469EPSS 0.4%2026-06-09

    Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

27. 3.3CVE-2026-45466EPSS 0.4%2026-06-09

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

28. 8.4CVE-2026-45463EPSS 0.4%2026-06-09

    Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.

29. 8.4CVE-2026-45461EPSS 0.4%2026-06-09

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

30. 4.7CVE-2026-45460EPSS 0.4%2026-06-09

    Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.

31. 3.3CVE-2026-45459EPSS 0.4%2026-06-09

    Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

32. 8.4CVE-2026-45458EPSS 0.4%2026-06-09

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

33. 7.8CVE-2026-45457EPSS 0.4%2026-06-09

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

34. 8.4CVE-2026-45456EPSS 0.4%2026-06-09

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

35. 4.3CVE-2026-45455EPSS 0.6%2026-06-09

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

36. 7.8CVE-2026-44824EPSS 0.5%2026-06-09

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

37. 7.8CVE-2026-44823EPSS 0.4%2026-06-09

    Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

38. 8.2CVE-2026-44822EPSS 0.5%2026-06-09

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

39. 5.5CVE-2026-44821EPSS 0.5%2026-06-09

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

40. 7.8CVE-2026-44820EPSS 0.4%2026-06-09

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

41. 7.8CVE-2026-44819EPSS 0.5%2026-06-09

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

42. 7.0CVE-2026-44818EPSS 0.3%2026-06-09

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

43. 7.8CVE-2026-44817EPSS 0.4%2026-06-09

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.