Priority LOW 35
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
CVSS 3.1HIGH 7.7· Local · No auth · No interaction · EPSS 0.00222 · Published 2026-05-12 · Fixed in 16.0.19822.20190, 16.109.26051019 CWE-284
Priority LOW 39
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00212 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases CWE-284
Priority LOW 39
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00219 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases CWE-1220
Priority LOW 36
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00254 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases CWE-416
Priority LOW 39
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00453 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +4 CWE-822
Priority LOW 36
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00328 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +2 CWE-122
Priority LOW 39
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00605 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +1 CWE-416
Priority LOW 36
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00332 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +2 CWE-416
Priority LOW 39
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00369 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +1 CWE-416
Priority LOW 36
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00437 · Published 2026-05-12 · Fixed in 16.0.19822.20190, 16.109.26051019 CWE-122
Priority LOW 21
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.0062 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 CWE-73
Priority LOW 36
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00305 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases CWE-416
Priority LOW 39
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00383 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +1 CWE-416
Priority MEDIUM 46
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.04421 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +1 CWE-122
Priority LOW 39
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00383 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +2 CWE-122
Priority LOW 34
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00408 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +2 CWE-125
Priority LOW 25
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00448 · Published 2026-05-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 CWE-552
Priority LOW 38
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00316 · Published 2026-04-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.108.26041219 CWE-416
Priority LOW 38
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00316 · Published 2026-04-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.108.26041219 CWE-822
Priority LOW 36
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00323 · Published 2026-04-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1001 CWE-416
Priority LOW 36
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00291 · Published 2026-04-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +2 CWE-416
Priority LOW 36
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00292 · Published 2026-04-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +2 CWE-416
Priority LOW 36
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00291 · Published 2026-04-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +2 CWE-416
Priority LOW 38
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00328 · Published 2026-04-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +1 CWE-416
Priority LOW 36
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00411 · Published 2026-04-14 · Fixed in https://aka.ms/OfficeSecurityReleases CWE-416
Load more