Fixes 39 records
Priority MEDIUM 42
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-08-03 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 CWE-416
Priority MEDIUM 42
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00518 · Published 2026-06-09 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001 +2 CWE-125
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122
Priority LOW 36
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-908
Priority LOW 36
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-416
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122
Priority LOW 36
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-121
Priority LOW 36
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-121
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122
Priority LOW 36
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-822
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122
Priority LOW 36
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122
Priority LOW 36
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122
Priority LOW 36
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122
Priority LOW 36
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122
Priority LOW 36
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-126
Priority LOW 36
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122
Priority LOW 36
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-843
Priority LOW 36
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-843
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122
Priority LOW 36
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00372 · Published 2026-06-09 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001 +2 CWE-122
Priority LOW 36
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00372 · Published 2026-06-09 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001 +2 CWE-197
Priority LOW 36
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00372 · Published 2026-06-09 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001 +2 CWE-125
Priority LOW 36
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00372 · Published 2026-06-09 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001 +2 CWE-843
Priority LOW 32
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00473 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125
Priority LOW 32
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00525 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.0· Local · No auth · User interaction · EPSS 0.00263 · Published 2026-06-09 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001 +2 CWE-362
Priority LOW 31
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125
Priority LOW 30
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 6.6· Local · No auth · User interaction · EPSS 0.00472 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-122
Priority LOW 28
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 6.1· Local · No auth · User interaction · EPSS 0.00461 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125
Priority LOW 26
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00541 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-822
Priority LOW 26
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00541 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125
Priority LOW 26
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00541 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-125
Priority LOW 26
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00541 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +2 CWE-822
Priority LOW 21
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00629 · Published 2026-06-09 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001 +2 CWE-125