Browse CVEs

HIGH 7.8 CVE-2026-64907 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-64906 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-64905 Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-64904 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-64903 Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 MEDIUM 5.4 CVE-2026-64902 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20522+ Fix from $4,0002026-08-11 HIGH 8.8 CVE-2026-64901 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server 16.0.19725.20522+ Fix from $4,9002026-08-11 MEDIUM 5.4 CVE-2026-64900 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20522+ Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-64899 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 HIGH 7.8 CVE-2026-64898 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 MEDIUM 5.4 CVE-2026-64897 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to … Sharepoint Server 16.0.19725.20522+ Fix from $4,0002026-08-11 HIGH 7.8 CVE-2026-63533 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-63532 Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 MEDIUM 5.5 CVE-2026-63531 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-63530 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 365 Apps Patch available Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-63529 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 5.5 CVE-2026-63528 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 365 Apps Patch available Fix from $4,0002026-08-11 HIGH 7.8 CVE-2026-63527 Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Patch available Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-63526 Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-63525 Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Patch available Fix from $4,9002026-08-11 MEDIUM 5.5 CVE-2026-63524 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 HIGH 7.8 CVE-2026-63522 Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally. Azure Sql Database No fix yet Fix from $4,9002026-08-11 MEDIUM 5.5 CVE-2026-63521 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. 365 Apps Patch available Fix from $4,0002026-08-11 HIGH 8.1 CVE-2026-63520 Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. Sharepoint Server 16.0.19725.20522+ Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-63519 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 HIGH 7.8 CVE-2026-63518 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. 365 Apps Patch available Fix from $4,9002026-08-11 MEDIUM 5.5 CVE-2026-63517 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. 365 Apps No fix yet Fix from $4,0002026-08-11 MEDIUM 6.5 CVE-2026-63516 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. Sharepoint Server 16.0.19725.20522+ Fix from $4,0002026-08-11 HIGH 7.8 CVE-2026-63515 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps No fix yet Fix from $4,9002026-08-11 HIGH 8.8 CVE-2026-63514 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Sharepoint Server 16.0.19725.20522+ Fix from $4,9002026-08-11