Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Sharepoint Server MEDIUM 5.4
CVE-2026-55135

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55127

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20175 / 16.0.19725.20434+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55128

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20175 / 16.0.19725.20434+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55129

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Patch available
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55130

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Fix: 16.0.19725.20434+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55131

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20175+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55132

Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Fix: 16.0.19725.20434+
Fix from $1,950 2026-07-14
Sharepoint Server MEDIUM 5.4
CVE-2026-55126

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55058

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20175+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55120

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

Patch available
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55123

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

Patch available
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55125

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Fix: 16.0.19725.20434+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.1
CVE-2026-55122

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Fix: 16.0.10417.20175+
Fix from $1,950 2026-07-14
365 Apps MEDIUM 5.5
CVE-2026-55121

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-14
365 Apps MEDIUM 5.5
CVE-2026-55124

Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Fix: 16.0.10417.20175 / 16.0.19725.20434+
Fix from $1,600 2026-07-14
Sharepoint Server HIGH 8.8
CVE-2026-55052

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Fix: 16.0.19725.20434+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55053

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20175+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55055

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Fix: 16.0.19725.20434+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55056

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

No fix yet
Fix from $1,950 2026-07-14
Sharepoint Server MEDIUM 6.5
CVE-2026-55051

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Fix: 16.0.19725.20434+
Fix from $1,600 2026-07-14
365 Apps MEDIUM 6.5
CVE-2026-55054

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Fix: 16.0.10417.20175 / 16.111.26071215+
Fix from $1,600 2026-07-14
365 Apps MEDIUM 5.5
CVE-2026-55050

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Fix: 16.0.10417.20175 / 16.0.19725.20434+
Fix from $1,600 2026-07-14
365 Apps MEDIUM 5.5
CVE-2026-55057

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

Patch available
Fix from $1,600 2026-07-14
365 Apps HIGH 8.4
CVE-2026-55045

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

Fix: 16.0.19725.20434+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55044

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20175+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55048

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20175+
Fix from $1,950 2026-07-14
365 Apps HIGH 7.8
CVE-2026-55049

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2026-07-14
365 Apps MEDIUM 5.5
CVE-2026-55046

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Fix: 16.0.10417.20175+
Fix from $1,600 2026-07-14
365 Apps MEDIUM 5.5
CVE-2026-55047

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Fix: 16.0.10417.20175 / 16.0.19725.20434+
Fix from $1,600 2026-07-14
Sharepoint Server CRITICAL 9.1
CVE-2026-55040 KEVEPSS 5%

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

Fix: 16.0.19725.20434+
Fix from $2,300 2026-07-14