Microsoft Microsoft 365 vulnerabilities

CVE-2026-62804 High · 7.8 CWE-73 Sep 8, 2026

Microsoft Word Remote Code Execution Vulnerability

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-70105 High · 7.5 CWE-20 Aug 20, 2026

Microsoft Word Information Disclosure Vulnerability

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-70328 Medium · 6.5 CWE-125 Aug 11, 2026

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-70327 Medium · 6.5 CWE-125 Aug 11, 2026

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-70325 Medium · 5.5 CWE-20 Aug 11, 2026

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70323 Medium · 5.5 CWE-20 Aug 11, 2026

Microsoft Office Information Disclosure Vulnerability

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70322 Medium · 5.5 CWE-20 Aug 11, 2026

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70320 Medium · 5.5 CWE-20 Aug 11, 2026

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70319 Medium · 5.5 CWE-20 Aug 11, 2026

Microsoft Office Word Information Disclosure Vulnerability

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-70318 Medium · 5.5 CWE-20 Aug 11, 2026

Microsoft Excel Information Disclosure Vulnerability

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-70317 Medium · 5.5 CWE-908 Aug 11, 2026

Microsoft Office Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70316 Medium · 5.5 CWE-20 Aug 11, 2026

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70315 Medium · 5.5 CWE-125 Aug 11, 2026

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70314 Medium · 5.5 CWE-20 Aug 11, 2026

Microsoft Office Information Disclosure Vulnerability

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70313 High · 7.8 CWE-20 Aug 11, 2026

Microsoft PowerPoint Remote Code Execution Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70312 Medium · 5.5 CWE-20 Aug 11, 2026

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70311 High · 7.8 CWE-416 Aug 11, 2026

Microsoft Office Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-70310 Medium · 5.5 CWE-125 Aug 11, 2026

Microsoft Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-68817 High · 7.8 CWE-121 Aug 11, 2026

Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68816 High · 7.8 CWE-121 Aug 11, 2026

Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68815 High · 7.8 CWE-122 Aug 11, 2026

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68814 High · 7.8 CWE-125 Aug 11, 2026

Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68813 Medium · 5.5 CWE-125 Aug 11, 2026

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-68812 High · 7.8 CWE-122 Aug 11, 2026

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-68811 High · 7.8 CWE-843 Aug 11, 2026

Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.