Read the docs
Microsoft update

KB5002916

Security Update

View on Microsoft →

Fixed in

Fixes 18 records

Priority MEDIUM 48

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority MEDIUM 45

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00373 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00837 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +16 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122
Priority MEDIUM 42

Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-787
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20131.20234, 16.0.5569.1000 +3 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +3 CWE-122
Priority LOW 35

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-125
Priority LOW 31

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-908
Priority LOW 31

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-125
Priority LOW 31

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-125
Priority LOW 31

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority LOW 31

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-125
Priority LOW 31

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-126
Priority LOW 31

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +5 CWE-125
Priority LOW 31

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-126
TI-2026-46412 CVE-2026-64918 · GHSA-x5mf-hm8f-322c

Microsoft Office Spoofing Vulnerability

Priority LOW 30

Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00874 Published 2026-09-08 Fixed in https://aka.ms/OfficeSecurityReleases CWE-522