Search Results (943 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-97774 1 Microsoft 1 365 Apps 2026-10-15 7 High
Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-96996 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 7.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-85340 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 7.8 High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-70276 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 7 High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-102856 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
CVE-2026-70215 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 8.8 High
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-70242 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 9.8 Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70256 1 Microsoft 2 365 Apps, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70257 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70281 1 Microsoft 13 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 10 more 2026-10-15 7.5 High
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-70282 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70291 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 9.8 Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-97016 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 9.8 Critical
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-105593 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105595 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105596 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105597 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105598 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105716 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105717 1 Microsoft 6 365 Apps, Microsoft 365 Apps For Enterprise, Microsoft Office Ltsc 2021 and 3 more 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.