Filtered by vendor Microsoft Subscriptions
Filtered by product Office Subscriptions
Total 1078 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-57084 1 Microsoft 29 Office, Office 365, Office Macos 2021 and 26 more 2026-11-11 5.5 Medium
Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally.
CVE-2026-57083 1 Microsoft 28 Office, Office 365, Office Macos 2021 and 25 more 2026-11-11 5.5 Medium
Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.
CVE-2026-62877 1 Microsoft 30 Office, Office 365, Office Macos 2021 and 27 more 2026-11-11 7.8 High
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62740 1 Microsoft 30 Office, Office 365, Office Macos 2021 and 27 more 2026-11-11 5.5 Medium
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-73013 1 Microsoft 27 Office, Windows 10 1607, Windows 10 1809 and 24 more 2026-11-11 8.8 High
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69499 1 Microsoft 30 Office, Office 365, Office Macos 2021 and 27 more 2026-11-11 8.8 High
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-68880 1 Microsoft 30 Office, Office 365, Office Macos 2021 and 27 more 2026-11-11 8 High
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69576 1 Microsoft 30 Office, Office 365, Office Macos 2021 and 27 more 2026-11-11 7.8 High
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
CVE-2026-69609 1 Microsoft 30 Office, Office 365, Office Macos 2021 and 27 more 2026-11-11 5.5 Medium
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2024-49065 1 Microsoft 7 365 Apps, Office, Office Long Term Servicing Channel and 4 more 2026-11-04 5.5 Medium
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-38200 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-11-04 6.5 Medium
Microsoft Office Spoofing Vulnerability
CVE-2024-30104 1 Microsoft 6 365 Apps, Office, Office 2016 and 3 more 2026-11-04 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-30103 1 Microsoft 7 365 Apps, Office, Office 2019 and 4 more 2026-11-04 8.8 High
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2016-0012 1 Microsoft 6 Excel, Office, Powerpoint and 3 more 2026-11-03 N/A
Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office 2016, Excel 2016, PowerPoint 2016, Visio 2016, Word 2016, and Visual Basic 6.0 Runtime allow remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Microsoft Office ASLR Bypass."
CVE-2023-36009 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-11-03 5.5 Medium
Microsoft Word Information Disclosure Vulnerability
CVE-2022-34717 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-11-03 8.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2026-85908 1 Microsoft 32 Office, Office 365, Office Macos 2021 and 29 more 2026-10-31 7.8 High
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-83651 1 Microsoft 32 Office, Office 365, Office Macos 2021 and 29 more 2026-10-31 6.5 Medium
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
CVE-2026-70211 1 Microsoft 32 Office, Office 365, Office Macos 2021 and 29 more 2026-10-31 5.5 Medium
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70271 1 Microsoft 29 Office, Windows 10 1607, Windows 10 1809 and 26 more 2026-10-31 7 High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.