Kwetsbaarheden verholpen in Microsoft Office

Summary

Details

Vulnerabilities 174

• High 8.8
  CVE-2026-96951 Exploited

  Windows Shell Security Feature Bypass Vulnerability

  Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Browsers
  Oct 13, 2026

  KEV Oct 13, 2026
• Critical 9.8
  CVE-2026-70096

  Windows Rich Text Edit Control Remote Code Execution Vulnerability

  Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 13, 2026
• Critical 9.8
  CVE-2026-70242

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Critical 9.8
  CVE-2026-70291

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Critical 9.8
  CVE-2026-70300

  Microsoft Office Word Remote Code Execution Vulnerability

  Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Critical 9.8
  CVE-2026-88156

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Critical 9.8
  CVE-2026-88178

  Microsoft Office PowerPoint Remote Code Execution Vulnerability

  Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Critical 9.8
  CVE-2026-97016

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Critical 9.8
  CVE-2026-97749

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-100209

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2024 Microsoft Office LTSC for Mac 2021
  Oct 13, 2026
• High 8.8
  CVE-2026-100210

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-100211

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2024 Microsoft Office LTSC for Mac 2021
  Oct 13, 2026
• High 8.8
  CVE-2026-100212

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-102849

  Microsoft Office Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-102850

  Microsoft Office Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-102855

  Microsoft Office Visio Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-102856

  Microsoft Office Visio Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-102857

  Microsoft Office Visio Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-102860

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-102861

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-102862

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-102863

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-105591

  Microsoft Office Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-105593

  Microsoft Office Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-105595

  Microsoft Office Access Remote Code Execution Vulnerability

  Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-105596

  Microsoft Office Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-105597

  Microsoft Office Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-105598

  Microsoft Office Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-105716

  Microsoft Office Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-105717

  Microsoft Office Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-105718

  Microsoft Excel Remote Code Execution Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-69943

  Microsoft Office SharePoint Remote Code Execution Vulnerability

  Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-70215

  Microsoft Office PowerPoint Remote Code Execution Vulnerability

  Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-70246

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-70254

  Microsoft Office Excel Remote Code Execution Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-70256

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-70257

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-70266

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-70268

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-70282

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-70287

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-70297

  Skype for Business Remote Code Execution Vulnerability

  Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.

  Microsoft Skype for Business Server 2015 CU13 Skype for Business Server Subscription Edition CU1 Skype for Business Server 2019 CU8
  Oct 13, 2026
• High 8.8
  CVE-2026-70301

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-70302

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-77902

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-83891

  Microsoft Office Word Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-85900

  Microsoft Office SharePoint Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-88144

  Microsoft Office PowerPoint Remote Code Execution Vulnerability

  Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-88145

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-88150

  Microsoft Office Word Remote Code Execution Vulnerability

  Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-88155

  Microsoft Office SharePoint Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-88163

  Microsoft Office SharePoint Remote Code Execution Vulnerability

  Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-88166

  Microsoft Office SharePoint Remote Code Execution Vulnerability

  Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-88186

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-88196

  Microsoft Office Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-88197

  Microsoft Office Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-88198

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-88200

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-88202

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-96044

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.8
  CVE-2026-97003

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97004

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97007

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97008

  Microsoft Office Excel Remote Code Execution Vulnerability

  Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97010

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97011

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97012

  Microsoft Office Outlook Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97017

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97738

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97739

  Microsoft Office Excel Remote Code Execution Vulnerability

  Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97741

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC for Mac 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97742

  Microsoft Office Excel Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97745

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97746

  Microsoft Office Excel Remote Code Execution Vulnerability

  Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97747

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97748

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97750

  Microsoft Office Excel Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97751

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97752

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97753

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97754

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97755

  Microsoft Office Excel Remote Code Execution Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97756

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97757

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97758

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97759

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2024 Microsoft Office LTSC for Mac 2021
  Oct 13, 2026
• High 8.8
  CVE-2026-97761

  Microsoft Office Excel Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2024 Microsoft Office LTSC for Mac 2021
  Oct 13, 2026
• High 8.8
  CVE-2026-97762

  Microsoft Office Excel Remote Code Execution Vulnerability

  Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97763

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97765

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97766

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97767

  Microsoft Office Excel Remote Code Execution Vulnerability

  Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97768

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97769

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97770

  Microsoft Office Excel Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97771

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97772

  Microsoft Office Excel Remote Code Execution Vulnerability

  Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97773

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97775

  Microsoft Office Excel Remote Code Execution Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97776

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97777

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97778

  Microsoft Office Excel Remote Code Execution Vulnerability

  Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.8
  CVE-2026-97780

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.2
  CVE-2026-85925

  Azure Key Vault Client SDK Elevation of Privilege Vulnerability

  Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.

  Microsoft azure-keyvault-administration azure-keyvault-keys azure-keyvault-certificates
  Oct 13, 2026
• High 8.1
  CVE-2026-102866

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 8.1
  CVE-2026-70269

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.1
  CVE-2026-83746

  Skype for Business Elevation of Privilege Vulnerability

  Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

  Microsoft Skype for Business Server 2015 CU13 Skype for Business Server Subscription Edition CU1 Skype for Business Server 2019 CU8
  Oct 13, 2026
• High 8.1
  CVE-2026-88185

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 8.1
  CVE-2026-97783

  Microsoft Office SharePoint Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 7.8
  CVE-2026-70220

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.8
  CVE-2026-85340

  Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

  Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.8
  CVE-2026-88210

  Microsoft Office Word Security Feature Bypass Vulnerability

  Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2024 Microsoft Office LTSC for Mac 2021
  Oct 13, 2026
• High 7.8
  CVE-2026-96995

  Microsoft Office Word Elevation of Privilege Vulnerability

  Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.8
  CVE-2026-96996

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.8
  CVE-2026-96997

  Microsoft Office OneNote Elevation of Privilege Vulnerability

  Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.8
  CVE-2026-97001

  Microsoft Office Word Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.8
  CVE-2026-97009

  Microsoft Office Excel Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.5
  CVE-2026-105592

  Microsoft Office Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.5
  CVE-2026-105599

  Microsoft Office PowerPoint Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.5
  CVE-2026-105714

  Microsoft Office Access Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.5
  CVE-2026-105715

  Microsoft Office Word Remote Code Execution Vulnerability

  Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.5
  CVE-2026-70202

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 7.5
  CVE-2026-70251

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 7.5
  CVE-2026-70281

  Microsoft Office Outlook Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.5
  CVE-2026-88206

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 7.5
  CVE-2026-88207

  Microsoft Office PowerPoint Remote Code Execution Vulnerability

  Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• High 7.4
  CVE-2026-105013

  Microsoft Office SharePoint Remote Code Execution Vulnerability

  Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 7.4
  CVE-2026-85922

  Azure Key Vault Security Feature Bypass Vulnerability

  Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft azure-keyvault-secrets azure-keyvault-administration azure-keyvault-keys
  Oct 13, 2026
• High 7.3
  CVE-2026-88204

  Microsoft Office SharePoint Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 7.2
  CVE-2026-70267

  Microsoft Office SharePoint Remote Code Execution Vulnerability

  Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• High 7.0
  CVE-2026-70276

  Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

  Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.8
  CVE-2026-97782

  Microsoft Office SharePoint Tampering Vulnerability

  Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• Medium 6.5
  CVE-2026-102865

  Microsoft Office SharePoint Information Disclosure Vulnerability

  Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• Medium 6.5
  CVE-2026-102867

  Microsoft Office Word Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-105719

  Microsoft SharePoint Server Information Disclosure Vulnerability

  Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• Medium 6.5
  CVE-2026-69877

  Azure DevOps Information Disclosure Vulnerability

  Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.

  Microsoft Azure CLI Azure DevOps CLI Extension
  Oct 13, 2026
• Medium 6.5
  CVE-2026-70206

  Microsoft Office Word Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-70219

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-70259

  Microsoft Office SharePoint Information Disclosure Vulnerability

  Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• Medium 6.5
  CVE-2026-70263

  Microsoft Office Word Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-70298

  Microsoft Office SharePoint Information Disclosure Vulnerability

  Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• Medium 6.5
  CVE-2026-85873

  Skype for Business Elevation of Privilege Vulnerability

  Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

  Microsoft Skype for Business Server 2015 CU13 Skype for Business Server 2019 CU8 Skype for Business Server Subscription Edition CU1
  Oct 13, 2026
• Medium 6.5
  CVE-2026-85932

  Microsoft Office SharePoint Information Disclosure Vulnerability

  Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88151

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88153

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88154

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88167

  Microsoft Office Word Information Disclosure Vulnerability

  Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88169

  Microsoft Office Word Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88172

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88175

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88183

  Microsoft Office PowerPoint Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88184

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88190

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88192

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88195

  Microsoft Office Excel Information Disclosure Vulnerability

  Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88201

  Microsoft Office Excel Information Disclosure Vulnerability

  Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-88203

  Microsoft Office PowerPoint Information Disclosure Vulnerability

  Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-94506

  Microsoft Office Access Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-97740

  Microsoft Office Excel Information Disclosure Vulnerability

  Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-97743

  Microsoft Office Excel Information Disclosure Vulnerability

  Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC for Mac 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-97760

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 6.5
  CVE-2026-97779

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 5.9
  CVE-2026-88132

  Azure Key Vault Information Disclosure Vulnerability

  Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.

  Microsoft azure-keyvault-certificates azure-keyvault-secrets azure-keyvault-administration
  Oct 13, 2026
• Medium 5.7
  CVE-2026-105713

  Microsoft Office SharePoint Spoofing Vulnerability

  Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• Medium 5.5
  CVE-2026-70214

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 5.5
  CVE-2026-97005

  Microsoft Office PowerPoint Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 5.5
  CVE-2026-97014

  Microsoft Office Excel Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 5.5
  CVE-2026-97744

  Microsoft Office PowerPoint Information Disclosure Vulnerability

  Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC 2024
  Oct 13, 2026
• Medium 4.9
  CVE-2026-70217

  Microsoft Office SharePoint Information Disclosure Vulnerability

  Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• Medium 4.6
  CVE-2026-102859

  Microsoft Office SharePoint Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• Medium 4.6
  CVE-2026-102864

  Microsoft Office SharePoint Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• Medium 4.6
  CVE-2026-88208

  Microsoft Office SharePoint Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• Medium 4.6
  CVE-2026-88209

  Microsoft Office SharePoint Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026
• Medium 4.3
  CVE-2026-105720

  Microsoft Office SharePoint Elevation of Privilege Vulnerability

  Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft SharePoint Server Subscription Edition
  Oct 13, 2026

Revision history

1. 2026-10-13 #1.0.0

   Initiele versie