Fixes 31 records
Priority MEDIUM 51
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-415
Priority MEDIUM 42
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-416
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-416
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-121
Priority MEDIUM 42
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-476
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority MEDIUM 42
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-121
Priority MEDIUM 42
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-121
Priority MEDIUM 42
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-121
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.113.26091433 +1 CWE-122
Priority LOW 37
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00609 · Published 2026-09-08 · Fixed in https://aka.ms/OfficeSecurityReleases CWE-73
Priority LOW 31
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
Priority LOW 31
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-125
Priority LOW 31
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-125
Priority LOW 31
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
Priority LOW 31
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
Priority LOW 31
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
Priority LOW 31
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.113.26091433 +1 CWE-125
Priority LOW 31
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-126
Priority LOW 26
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00541 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-126
Priority LOW 26
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00541 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-126
Priority LOW 26
Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00541 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-170
Priority LOW 23
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.0· Local · Low privileges · User interaction · EPSS 0.00512 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
THREATIST.IORead the docs