Kwetsbaarheden verholpen in Microsoft Office

Summary

Details

Vulnerabilities 128

• High 8.8
  CVE-2026-65660 Exploited Public exploit

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026

  KEV Sep 25, 2026
• Critical 10.0
  CVE-2026-65667

  Microsoft Teams Elevation of Privilege Vulnerability

  Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.

  Microsoft Microsoft Teams
  Aug 6, 2026
• Critical 9.9
  CVE-2026-50515

  Azure Service Bus Remote Code Execution Vulnerability

  Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.

  Microsoft Azure Service Bus
  Aug 6, 2026
• Critical 9.6
  CVE-2026-62896

  Microsoft Teams Elevation of Privilege Vulnerability

  Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft Teams
  Aug 6, 2026
• Critical 9.6
  CVE-2026-70332

  Microsoft Office SharePoint Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Online
  Aug 6, 2026
• Critical 9.3
  CVE-2026-70306

  Microsoft Office SharePoint Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-62827

  Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-63514

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-64901

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-64921

  Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-65658

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-65663

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-65665

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-65767

  Microsoft Teams for Android Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft Teams for Android Android
  Aug 11, 2026
• High 8.8
  CVE-2026-65768

  Microsoft Teams Remote Code Execution Vulnerability

  Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft Teams for Android Android
  Aug 11, 2026
• High 8.8
  CVE-2026-65807

  Microsoft Excel Remote Code Execution Vulnerability

  Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 8.8
  CVE-2026-66805

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-66808

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-70321

  Microsoft SharePoint Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-70324

  Microsoft SharePoint Elevation of Privilege Vulnerability

  Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-70326

  Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.8
  CVE-2026-70329

  Microsoft Outlook Remote Code Execution Vulnerability

  Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 8.7
  CVE-2026-62836

  Azure SQL Managed Instance Elevation of Privilege Vulnerability

  Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

  Microsoft Azure SQL Managed Instance
  Aug 6, 2026
• High 8.4
  CVE-2026-70130

  Microsoft Office Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 8.1
  CVE-2026-63520 Public exploit

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 8.0
  CVE-2026-57105

  Microsoft Office SharePoint Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 7.8
  CVE-2026-58651

  Microsoft Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-63513

  Microsoft Office Graphics Component Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-63515

  Microsoft Office Remote Code Execution Vulnerability

  Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-63518

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-63519

  Microsoft Office Graphics Component Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-63525

  Microsoft Office Word Remote Code Execution Vulnerability

  Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-63526

  Microsoft Office Graphics Component Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-63527

  Microsoft Office Word Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-63532

  Microsoft Office Remote Code Execution Vulnerability

  Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-63533

  Microsoft Office Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64898

  Microsoft Office Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64903

  Microsoft Office Remote Code Execution Vulnerability

  Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64904

  Microsoft Office Remote Code Execution Vulnerability

  Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64905

  Microsoft Office Word Remote Code Execution Vulnerability

  Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64906

  Microsoft Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64907

  Microsoft Office Word Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64908

  Microsoft Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64909

  Microsoft Office Remote Code Execution Vulnerability

  Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64910

  Microsoft Office Remote Code Execution Vulnerability

  Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64911

  Microsoft Office Remote Code Execution Vulnerability

  Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64912

  Microsoft Access Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64914

  Microsoft Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64915

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64919

  Microsoft Access Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-64920

  Microsoft Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-65656

  Microsoft Office Remote Code Execution Vulnerability

  Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-65657

  Microsoft Office Remote Code Execution Vulnerability

  Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-65661

  Microsoft Office Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-65664

  Microsoft Office Graphics Component Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-66807

  Microsoft Office Graphics Component Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68792

  Microsoft Office Elevation of Privilege Vulnerability

  Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68793

  Microsoft Excel Remote Code Execution Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68794

  Microsoft Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68795

  Microsoft Excel Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68796

  Microsoft Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68798

  Microsoft Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68800

  Microsoft Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68801

  Microsoft Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68803

  Microsoft Excel Remote Code Execution Vulnerability

  Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68804

  Microsoft Excel Remote Code Execution Vulnerability

  Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68805

  Microsoft Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68806

  Microsoft Excel Remote Code Execution Vulnerability

  Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68807

  Microsoft Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68810

  Microsoft Excel Remote Code Execution Vulnerability

  Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68811

  Microsoft Excel Remote Code Execution Vulnerability

  Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68812

  Microsoft Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68814

  Microsoft Excel Remote Code Execution Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68815

  Microsoft Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68816

  Microsoft Excel Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-68817

  Microsoft Excel Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-70311

  Microsoft Office Word Remote Code Execution Vulnerability

  Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.8
  CVE-2026-70313

  Microsoft PowerPoint Remote Code Execution Vulnerability

  Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• High 7.5
  CVE-2026-62918

  Microsoft Teams Spoofing Vulnerability

  Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Microsoft Teams
  Aug 6, 2026
• High 7.3
  CVE-2026-64900

  Microsoft SharePoint Server Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• High 7.3
  CVE-2026-70355

  Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• Medium 6.7
  CVE-2026-65680

  Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

  Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.

  Microsoft OneDrive for MacOS macOS
  Aug 11, 2026
• Medium 6.5
  CVE-2026-58639

  Microsoft SharePoint Server Spoofing Vulnerability

  Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• Medium 6.5
  CVE-2026-62837

  Microsoft SharePoint Server Information Disclosure Vulnerability

  Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• Medium 6.5
  CVE-2026-62839

  Microsoft SharePoint Server Spoofing Vulnerability

  Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• Medium 6.5
  CVE-2026-63512

  Microsoft SharePoint Server Tampering Vulnerability

  Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• Medium 6.5
  CVE-2026-63516

  Microsoft SharePoint Server Spoofing Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• Medium 6.5
  CVE-2026-65769

  Microsoft Teams iOS Information Disclosure Vulnerability

  Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft Teams for iOS iOS
  Aug 11, 2026
• Medium 6.5
  CVE-2026-70327

  Microsoft Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 6.5
  CVE-2026-70328

  Microsoft Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-62842

  Microsoft Office Graphics Component Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-63517

  Microsoft Office Graphics Component Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-63521

  Microsoft Office Word Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-63524

  Microsoft Office Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-63528

  Microsoft Office Word Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-63529

  Microsoft Office Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-63530

  Microsoft Office Word Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-63531

  Microsoft Office Word Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-64899

  Microsoft Office Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-64917

  Microsoft Office Word Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-66806

  Microsoft Office Word Information Disclosure Vulnerability

  Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-66809

  Microsoft Office Graphics Component Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-66810

  Microsoft Office Word Information Disclosure Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-68797

  Microsoft Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-68799

  Microsoft Excel Information Disclosure Vulnerability

  Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-68802

  Microsoft Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-68808

  Microsoft Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-68809

  Powerpoint Information Disclosure Vulnerability

  Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-68813

  Microsoft Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-70310

  Microsoft Word Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-70312

  Powerpoint Information Disclosure Vulnerability

  Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-70314

  Microsoft Office Information Disclosure Vulnerability

  Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-70315

  Microsoft Office Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-70316

  Powerpoint Information Disclosure Vulnerability

  Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-70317

  Microsoft Office Information Disclosure Vulnerability

  Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-70318

  Microsoft Excel Information Disclosure Vulnerability

  Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-70319

  Microsoft Office Word Information Disclosure Vulnerability

  Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-70320

  Powerpoint Information Disclosure Vulnerability

  Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-70322

  Powerpoint Information Disclosure Vulnerability

  Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-70323

  Microsoft Office Information Disclosure Vulnerability

  Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 5.5
  CVE-2026-70325

  Powerpoint Information Disclosure Vulnerability

  Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026
• Medium 4.6
  CVE-2026-62829

  Microsoft SharePoint Server Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• Medium 4.6
  CVE-2026-62917

  Microsoft SharePoint Server Spoofing Vulnerability

  Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• Medium 4.6
  CVE-2026-64897

  Microsoft SharePoint Server Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• Medium 4.6
  CVE-2026-64902

  Microsoft SharePoint Server Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• Medium 4.6
  CVE-2026-64916

  Microsoft SharePoint Server Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• Medium 4.6
  CVE-2026-64922

  Microsoft SharePoint Server Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Aug 11, 2026
• Medium 4.3
  CVE-2026-62882

  Microsoft Outlook Spoofing Vulnerability

  Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Aug 11, 2026

Revision history

1. 2026-08-27 #1.0.1

   Er wordt actief misbruik gemeld van de kwetsbaarheid met kenmerk CVE-2026-63520 in Sharepoint.

2. 2026-08-11 #1.0.0

   Initiele versie