Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

936 records

Vendor: Microsoft Component: 365 Apps Clear all filters
TI-2026-75038 CVE-2026-108455

Microsoft Office PowerPoint Information Disclosure Vulnerability

Priority LOW 30

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0074 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-125
TI-2026-75037 CVE-2026-108454

Microsoft Office PowerPoint Information Disclosure Vulnerability

Priority LOW 30

Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0074 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-126
TI-2026-75036 CVE-2026-108453

x

Priority LOW 30

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00756 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-125
TI-2026-75034 CVE-2026-108451

x

Priority MEDIUM 41

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00618 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-75033 CVE-2026-108450

Heap overflow in Microsoft Office Word enables remote code execution

Priority MEDIUM 41

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00618 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-75032 CVE-2026-108449

Heap overflow in Microsoft Office Word enables remote code execution

Priority MEDIUM 41

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00618 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-122
TI-2026-75030 CVE-2026-108447

Heap overflow in Microsoft Office Word allows remote code execution

Priority MEDIUM 41

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00618 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-75024 CVE-2026-108441

Heap overflow in Microsoft Office Word enables remote code execution

Priority MEDIUM 41

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00618 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-122
TI-2026-75023 CVE-2026-108440

Stack overflow in Microsoft Office Word allows remote code execution

Priority MEDIUM 41

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00618 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-121
TI-2026-75022 CVE-2026-108439

Heap overflow in Microsoft Office Word enables remote code execution

Priority MEDIUM 41

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00618 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-122
TI-2026-75021 CVE-2026-108438

Use after free in Microsoft Office Word leaks information

Priority LOW 30

Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0074 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 CWE-416
TI-2026-75020 CVE-2026-108437

Heap overflow in Microsoft Office Word enables remote code execution

Priority MEDIUM 41

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00618 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974 +1 CWE-122
TI-2026-75019 CVE-2026-108436

Out-of-bounds read in Microsoft Office Word discloses information

Priority LOW 30

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0074 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-125
TI-2026-75018 CVE-2026-108435

Information disclosure in Microsoft Office Word

Priority LOW 30

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0074 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-822
TI-2026-75017 CVE-2026-108434

Out-of-bounds read in Microsoft Office Word discloses information

Priority LOW 30

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0074 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-125
TI-2026-75016 CVE-2026-108433

Security feature bypass in Microsoft Office Word

Priority LOW 36

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00419 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-807
TI-2026-75015 CVE-2026-108432

Heap overflow in Microsoft Office Word enables remote code execution

Priority MEDIUM 41

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00618 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-122
TI-2026-75014 CVE-2026-108431

Stack-based buffer overflow in Microsoft Word allows code execution

Priority MEDIUM 41

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00618 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-121
TI-2026-75013 CVE-2026-108430

Heap overflow in Microsoft Office Word allows remote code execution

Priority MEDIUM 41

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00618 Published 2026-10-15 Fixed in https://aka.ms/OfficeSecurityReleases, 16.114.26101123 +2 CWE-122
Load more