Microsoft 365 Apps vulnerabilities

CVE-2026-40359 High · 7.8 CWE-416 May 12, 2026

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-40358 High · 8.4 CWE-416 May 12, 2026

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-35440 Medium · 5.5 CWE-552 May 12, 2026

Microsoft Word Information Disclosure Vulnerability

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-35436 High · 8.8 CWE-1220 May 12, 2026

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2026-33822 Medium · 6.1 CWE-125 Apr 14, 2026

Microsoft Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-33115 High · 8.4 CWE-416 Apr 14, 2026

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-33114 High · 8.4 CWE-822 Apr 14, 2026

Microsoft Word Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-33095 High · 7.8 CWE-416 Apr 14, 2026

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-32200 High · 7.8 CWE-416 Apr 14, 2026

Microsoft PowerPoint Remote Code Execution Vulnerability

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

CVE-2026-32199 High · 7.8 CWE-416 Apr 14, 2026

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-32198 High · 7.8 CWE-416 Apr 14, 2026

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-32197 High · 7.8 CWE-416 Apr 14, 2026

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-32190 High · 8.4 CWE-416 Apr 14, 2026

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-32189 High · 7.8 CWE-416 Apr 14, 2026

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-32188 High · 7.1 CWE-125 Apr 14, 2026

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-23657 High · 7.8 CWE-416 Apr 14, 2026

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-26144 Medium · 4.7 CWE-79 Mar 10, 2026

Microsoft Excel Information Disclosure Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-26113 High · 7.8 CWE-822 Mar 10, 2026

Microsoft Office Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-26112 High · 7.8 CWE-822 Mar 10, 2026

Microsoft Excel Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-26110 High · 7.8 CWE-843 Mar 10, 2026

Microsoft Office Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-26109 High · 7.8 CWE-125 Mar 10, 2026

Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-26108 High · 7.8 CWE-787 Mar 10, 2026

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-26107 High · 7.8 CWE-416 Mar 10, 2026

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-21511 High · 7.5 CWE-502 Feb 10, 2026

Microsoft Outlook Spoofing Vulnerability

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-21514 High · 7.8 KEV High · 58 Public exploit CWE-807 Feb 10, 2026

Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.