cve.bz

microsoft office vulnerabilities, newest first

Filter
  1. 7.5CVE-2026-70105EPSS 1.0%

    Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  2. 6.5CVE-2026-55054EPSS 0.9%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  3. 7.0CVE-2026-47293EPSS 0.2%

    Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

  4. 5.5CVE-2026-42832EPSS 0.2%

    Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.

  5. 7.8CVE-2026-42831EPSS 0.4%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  6. 4.3CVE-2026-40421EPSS 0.6%

    Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  7. 8.8CVE-2026-40420EPSS 0.2%

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  8. 7.8CVE-2026-40419EPSS 0.3%

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  9. 7.8CVE-2026-40418EPSS 0.3%

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  10. 8.4CVE-2026-40367EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  11. 8.4CVE-2026-40366EPSS 0.4%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  12. 8.4CVE-2026-40364EPSS 4.4%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  13. 8.4CVE-2026-40363EPSS 0.4%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  14. 7.8CVE-2026-40362EPSS 0.3%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  15. 8.4CVE-2026-40361EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  16. 7.8CVE-2026-40360EPSS 0.4%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  17. 7.8CVE-2026-40359EPSS 0.3%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  18. 8.4CVE-2026-40358EPSS 0.4%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  19. 5.5CVE-2026-35440EPSS 0.4%

    Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  20. 8.8CVE-2026-35436EPSS 0.2%

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  21. 7.8CVE-2026-32200EPSS 0.3%

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

  22. 7.8CVE-2026-32199EPSS 0.3%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  23. 7.8CVE-2026-32198EPSS 0.3%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  24. 7.8CVE-2026-32197EPSS 0.3%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  25. 8.4CVE-2026-32190EPSS 0.3%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  26. 7.8CVE-2026-32189EPSS 0.4%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  27. 7.1CVE-2026-32188EPSS 0.4%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  28. 7.8CVE-2026-26113EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

  29. 7.8CVE-2026-26112EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  30. 7.8CVE-2026-26110EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

  31. 7.8CVE-2026-26109EPSS 0.4%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  32. 7.8CVE-2026-26108EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  33. 7.8CVE-2026-26107EPSS 0.5%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  34. 7.5CVE-2026-21511EPSS 4.0%

    Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

  35. 5.5CVE-2026-21261EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  36. 7.5CVE-2026-21260EPSS 1.5%

    Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

  37. 7.8CVE-2026-21259EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally.

  38. 5.5CVE-2026-21258EPSS 0.6%

    Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  39. 7.8CVE-2026-21509KEVEPSS 71%

    Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

  40. 7.8CVE-2026-20957EPSS 0.5%

    Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  41. 7.8CVE-2026-20955EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  42. 8.4CVE-2026-20953EPSS 0.6%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  43. 8.4CVE-2026-20952EPSS 0.5%

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  44. 7.8CVE-2026-20950EPSS 0.5%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  45. 7.8CVE-2026-20948EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  46. 7.8CVE-2026-20946EPSS 0.7%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  47. 7.0CVE-2026-20943EPSS 0.6%

    Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.

  48. 7.8CVE-2025-62564EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  49. 7.8CVE-2025-62563EPSS 0.6%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  50. 7.8CVE-2025-62562EPSS 0.8%

    Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.