Fixes 23 records
Priority LOW 39
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00446 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 37
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00571 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-122
Priority LOW 37
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00509 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-125
Priority LOW 36
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-122
Priority LOW 36
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-843
Priority LOW 36
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-416
Priority LOW 36
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-416
Priority LOW 36
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-416
Priority LOW 36
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 CWE-122
Priority LOW 32
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00496 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-125
Priority LOW 28
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00449 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-190
Priority LOW 26
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00541 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-125
Priority LOW 26
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00595 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00541 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-190
Priority LOW 26
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00595 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00541 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-908
Priority LOW 26
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00574 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00595 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00595 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00595 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 25
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00482 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-125
Priority LOW 25
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00513 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125