Vulnerabilidades do Microsoft 365 Apps

CVE-2026-44824 Alta · 7.8 CWE-122 09/06/2026

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-44823 Alta · 7.8 CWE-197 09/06/2026

Microsoft Excel Remote Code Execution Vulnerability

Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-44822 Alta · 8.2 CWE-125 09/06/2026

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-44821 Média · 5.5 CWE-125 09/06/2026

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-44820 Alta · 7.8 CWE-125 09/06/2026

Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-44819 Alta · 7.8 CWE-122 09/06/2026

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-44818 Alta · 7.0 CWE-362 09/06/2026

Microsoft Excel Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-44817 Alta · 7.8 CWE-843 09/06/2026

Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-40421 Média · 4.3 CWE-73 12/05/2026

Microsoft Word Information Disclosure Vulnerability

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-40420 Alta · 8.8 CWE-284 12/05/2026

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2026-40419 Alta · 7.8 CWE-416 12/05/2026

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2026-40418 Alta · 7.8 CWE-416 12/05/2026

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2026-40367 Alta · 8.4 CWE-822 12/05/2026

Microsoft Word Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-40366 Alta · 8.4 CWE-416 12/05/2026

Microsoft Word Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-40364 Alta · 8.4 CWE-122 12/05/2026

Microsoft Word Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-40363 Alta · 8.4 CWE-122 12/05/2026

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-40362 Alta · 7.8 CWE-122 12/05/2026

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-40361 Alta · 8.4 CWE-416 12/05/2026

Microsoft Outlook and Word Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-40360 Alta · 7.8 CWE-125 12/05/2026

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-40359 Alta · 7.8 CWE-416 12/05/2026

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-40358 Alta · 8.4 CWE-416 12/05/2026

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-35440 Média · 5.5 CWE-552 12/05/2026

Microsoft Word Information Disclosure Vulnerability

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-35436 Alta · 8.8 CWE-1220 12/05/2026

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

CVE-2026-33822 Média · 6.1 CWE-125 14/04/2026

Microsoft Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-33115 Alta · 8.4 CWE-416 14/04/2026

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.