Fixes 18 records
Priority MEDIUM 48
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority MEDIUM 45
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00373 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00837 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1003 +16 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122
Priority MEDIUM 42
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-787
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20131.20234, 16.0.5569.1000 +3 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +3 CWE-122
Priority LOW 35
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-125
Priority LOW 31
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-908
Priority LOW 31
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-125
Priority LOW 31
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-125
Priority LOW 31
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority LOW 31
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-125
Priority LOW 31
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-126
Priority LOW 31
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +5 CWE-125
Priority LOW 31
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-126
Priority LOW 30
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00874 · Published 2026-09-08 · Fixed in https://aka.ms/OfficeSecurityReleases CWE-522