Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.May 12, 2026
- Medium6.1Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.Apr 14, 2026
- High8.4Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.Apr 14, 2026
- High8.4Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.Apr 14, 2026
- High7.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.Apr 14, 2026
- High7.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.Apr 14, 2026
- High7.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Apr 14, 2026
- High7.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Apr 14, 2026
- High7.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Apr 14, 2026
- High8.4Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.Apr 14, 2026
- High7.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Apr 14, 2026
- High7.1Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.Apr 14, 2026
- High7.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.Apr 14, 2026
- Medium6.9Outlook Password Recovery 2.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload.EPSS 0.1%Mar 11, 2026
- Medium4.7Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Excel allows an unauthorized attacker to disclose information…Mar 10, 2026
- High7.8Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.Mar 10, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Mar 10, 2026
- High7.8Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.Mar 10, 2026
- High7.8Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Mar 10, 2026
- High7.8Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.Mar 10, 2026
- High7.8Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Mar 10, 2026
- High7.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Mar 10, 2026
- High7.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Mar 10, 2026
- High8.8Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Mar 10, 2026
- High7.8Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision VulnerabilityKEVEPSS 1.6%Feb 10, 2026