Veille CVE

Mardi 20 octobre 2026

19 CVE

  1. CVE-2026-100208 8.1 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-102855 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-108426 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  4. CVE-2026-108427 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  5. CVE-2026-108428 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  6. CVE-2026-108429 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  7. CVE-2026-108430 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  8. CVE-2026-108431 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  9. CVE-2026-108432 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  10. CVE-2026-108433 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

  11. CVE-2026-108434 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  12. CVE-2026-108435 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  13. CVE-2026-108436 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  14. CVE-2026-108437 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  15. CVE-2026-108438 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC for Mac 2021 · Microsoft Office LTSC for Mac 2024

    Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  16. CVE-2026-108439 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  17. CVE-2026-108440 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  18. CVE-2026-108441 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  19. CVE-2026-108442 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.