Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

366 records

TI-2026-31041 CVE-2026-42832 · GHSA-857p-384w-97mc

Microsoft Office Spoofing Vulnerability

Priority LOW 35

Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00222 Published 2026-05-12 Fixed in 16.0.19822.20190, 16.109.26051019 CWE-284
Priority LOW 39

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00453 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +4 CWE-822
Priority LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00328 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +2 CWE-122
Priority LOW 39

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00605 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +1 CWE-416
Priority LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00332 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +2 CWE-416
Priority LOW 39

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00369 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +1 CWE-416
Priority LOW 36

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00437 Published 2026-05-12 Fixed in 16.0.19822.20190, 16.109.26051019 CWE-122
Priority LOW 21

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0062 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 CWE-73
Priority LOW 39

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00383 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +1 CWE-416
Priority MEDIUM 46

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.04421 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.109.26051019 +1 CWE-122
Priority LOW 39

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00383 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +2 CWE-122
Priority LOW 34

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00408 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 +2 CWE-125
Priority LOW 25

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00448 Published 2026-05-12 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5552.1000 CWE-552
Priority LOW 38

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00316 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.108.26041219 CWE-416
Priority LOW 38

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00316 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.108.26041219 CWE-822
Priority LOW 36

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00323 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1001 CWE-416
Priority LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00291 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +2 CWE-416
Priority LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00292 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +2 CWE-416
Priority LOW 36

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00291 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +2 CWE-416
Priority LOW 38

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00328 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1000 +1 CWE-416
Priority LOW 36

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00411 Published 2026-04-14 Fixed in https://aka.ms/OfficeSecurityReleases CWE-416
Load more