Read the docs
Microsoft update

KB5002887

Security Update

View on Microsoft →

Fixed in

Fixes 23 records

Priority LOW 39

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00446 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 37

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00571 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-122
Priority LOW 37

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00509 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-125
Priority LOW 36

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-122
Priority LOW 36

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-122
Priority LOW 36

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-843
Priority LOW 36

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-416
Priority LOW 36

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-416
Priority LOW 36

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-416
Priority LOW 36

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 CWE-122
Priority LOW 32

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00496 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-125
Priority LOW 28

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00449 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-190
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-125
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-190
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-908
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00574 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 25

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00482 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +1 CWE-125
Priority LOW 25

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00513 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125