Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

319 records

Priority LOW 26

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-126
Priority LOW 26

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-126
Priority LOW 31

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-415
Priority MEDIUM 42

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-416
Priority LOW 31

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
Priority LOW 31

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-125
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority LOW 31

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-125
Priority LOW 31

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
Priority MEDIUM 42

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-416
Priority MEDIUM 42

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1002 +4 CWE-122
Priority LOW 26

Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00541 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-170
Priority LOW 31

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.113.26091433 +1 CWE-125
Priority MEDIUM 42

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-476
Priority LOW 23

Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00512 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 51

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-121
Priority LOW 31

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Load more