Read the docs
Microsoft update

KB5002892

Security Update

View on Microsoft →

Fixed in

Fixes 22 records

Priority LOW 39

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00446 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 37

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00571 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +4 CWE-121
Priority LOW 37

Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00571 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +4 CWE-415
Priority LOW 37

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00571 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001 +3 CWE-122
Priority LOW 37

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00571 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +4 CWE-416
Priority LOW 37

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00571 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +4 CWE-122
Priority LOW 37

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00571 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-122
Priority LOW 37

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00571 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +4 CWE-121
Priority LOW 37

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00571 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +4 CWE-121
Priority LOW 37

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00571 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +4 CWE-122
Priority LOW 37

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00571 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +4 CWE-416
Priority LOW 28

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00449 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-190
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +4 CWE-197
Priority LOW 26

Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +4 CWE-1287
Priority LOW 26

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +4 CWE-125
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00574 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 26

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00595 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125
Priority LOW 25

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00513 Published 2026-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000 +4 CWE-125