TI-2026-49129 CVE-2026-70311 · GHSA-q435-q689-9ppx
Microsoft Office Word Remote Code Execution Vulnerability
Priority LOW 36
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
KB5002901
Security Update
Fixed in
- Microsoft Word 2016 (32-bit edition) 16.0.5565.1000
- Microsoft Word 2016 (64-bit edition) 16.0.5565.1000
Fixes 17 records
TI-2026-46409 CVE-2026-64915 · GHSA-7r87-rqc6-m6vh
Microsoft Office Word Remote Code Execution Vulnerability
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
TI-2026-46402 CVE-2026-64907 · GHSA-4hxm-v7c3-w944
Microsoft Office Word Remote Code Execution Vulnerability
Priority LOW 36
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
TI-2026-46400 CVE-2026-64905 · GHSA-6hjh-h637-rp4m
Microsoft Office Word Remote Code Execution Vulnerability
Priority LOW 36
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
TI-2026-45257 CVE-2026-63527 · GHSA-q4mx-rwhg-jjg4
Microsoft Office Word Remote Code Execution Vulnerability
Priority LOW 36
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
TI-2026-45255 CVE-2026-63525 · GHSA-p392-rqwr-573j
Microsoft Office Word Remote Code Execution Vulnerability
Priority LOW 36
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
TI-2026-49112 CVE-2026-70105 · GHSA-r6q7-c86h-xxvp
Microsoft Word Information Disclosure Vulnerability
Priority LOW 35
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
TI-2026-49136 CVE-2026-70318 · GHSA-5fx6-3jpg-j6pm
Microsoft Excel Information Disclosure Vulnerability
Priority LOW 26
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
TI-2026-46411 CVE-2026-64917 · GHSA-h3x5-jw7p-ff7v
Microsoft Office Word Information Disclosure Vulnerability
Priority LOW 26
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
TI-2026-45261 CVE-2026-63531 · GHSA-q839-g6gr-9h5f
Microsoft Office Word Information Disclosure Vulnerability
Priority LOW 26
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
TI-2026-45260 CVE-2026-63530 · GHSA-qccf-jxm6-539r
Microsoft Office Word Information Disclosure Vulnerability
Priority LOW 26
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
TI-2026-45258 CVE-2026-63528 · GHSA-9mcm-3jwv-v4xr
Microsoft Office Word Information Disclosure Vulnerability
Priority LOW 26
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
TI-2026-49128 CVE-2026-70310 · GHSA-w2q6-rm48-2h84
Microsoft Word Information Disclosure Vulnerability
Priority LOW 25
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
TI-2026-47449 CVE-2026-66810 · GHSA-jjhm-qqfx-22xc
Microsoft Office Word Information Disclosure Vulnerability
Priority LOW 25
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
TI-2026-47448 CVE-2026-66809 · GHSA-fc76-3hc4-hv86
Microsoft Office Graphics Component Information Disclosure Vulnerability
Priority LOW 25
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
TI-2026-47445 CVE-2026-66806 · GHSA-vr2p-489v-8hm2
Microsoft Office Word Information Disclosure Vulnerability
Priority LOW 25
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
TI-2026-45251 CVE-2026-63521 · GHSA-xc57-cq3p-j9vp
Microsoft Office Word Information Disclosure Vulnerability
Priority LOW 25
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.