Veille CVE

Septembre 2026

118 CVE

Critique 2 Élevée 71 Moyenne 45 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft microsoft 365 » ✕
  1. CVE-2026-100208 8.1 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  2. CVE-2026-84458 9.1 Critique

    zammad

    Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setting is enabled, Zammad binds an incoming third-party (SSO) identity to an existing local account by matching the email address the identity provider reports, without verifying that the provider actually confirmed ownership of that email. An attacker who controls any identity at a configured provider, including, by default, any Azure AD tenant via Zammad's multi-tenant Microsoft 365 /common app registration, can set that identity's email to a victim's address, authenticate, and be logged in as the victim. This bypasses the victim's local password entirely and affects any existing account, including agents and administrators. Zammad will honor the xms_edov ID token claim when email verification is required in the Microsoft 365 setting, treating a missing claim as unverified. This issue is fixed in version 7.1.2.

  3. CVE-2026-63205 5.1 Moyenne

    zammad

    Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or updating an email signature, Zammad processes inline images referenced in the signature body. If a signature body contains an HTML img tag pointing to any existing attachment, the system copies that attachment into a new signature-owned record, without checking whether the user has permission to access the original attachment. The newly created copy is then downloadable by the same channel-admin user, because attachment access is determined by the copy's owner (the signature), not the original object (e.g., a ticket or knowledge-base article). This allows a user with any of the admin.channel_email, admin.channel_google, admin.channel_microsoft365, or admin.channel_microsoft_graph permissions to read attachments they would otherwise be denied access to, such as ticket attachments belonging to groups they are not a member of. This issue is fixed in version 7.1.2.

  4. CVE-2026-70125 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Microsoft Office Outlook Remote Code Execution Vulnerability

  5. CVE-2026-85887 7.7 Élevée

    Microsoft 365 Copilot

    Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.

  6. CVE-2026-85885 8.8 Élevée

    Microsoft 365 Copilot

    Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.

  7. CVE-2026-78501 8.6 Élevée

    Microsoft 365 Copilot's Business Chat · Microsoft 365 copilot chat

    Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.

  8. CVE-2026-58201 8.7 Élevée

    merill lokka

    Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the management.azure.com base URL. A specially crafted path can alter URL authority parsing and cause an Azure Resource Manager bearer token to be sent to an unintended host. This issue is fixed in version 2.1.2.

  9. CVE-2026-85875 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  10. CVE-2026-83951 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  11. CVE-2026-83949 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  12. CVE-2026-81960 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  13. CVE-2026-81959 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  14. CVE-2026-81958 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  15. CVE-2026-81957 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  16. CVE-2026-81956 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  17. CVE-2026-81955 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

  18. CVE-2026-81954 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  19. CVE-2026-81953 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  20. CVE-2026-81952 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  21. CVE-2026-81951 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  22. CVE-2026-81950 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  23. CVE-2026-81949 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  24. CVE-2026-81948 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  25. CVE-2026-81947 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  26. CVE-2026-81401 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  27. CVE-2026-81400 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  28. CVE-2026-81399 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  29. CVE-2026-81398 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  30. CVE-2026-81397 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  31. CVE-2026-81396 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  32. CVE-2026-81395 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  33. CVE-2026-81394 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  34. CVE-2026-81393 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  35. CVE-2026-81392 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  36. CVE-2026-81391 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  37. CVE-2026-81390 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  38. CVE-2026-81389 7.0 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  39. CVE-2026-81388 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  40. CVE-2026-81387 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  41. CVE-2026-81386 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  42. CVE-2026-81385 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

  43. CVE-2026-80091 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  44. CVE-2026-80090 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  45. CVE-2026-80089 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  46. CVE-2026-80088 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  47. CVE-2026-80087 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  48. CVE-2026-80086 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  49. CVE-2026-80085 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  50. CVE-2026-80084 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

  51. CVE-2026-80082 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  52. CVE-2026-80081 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft 365 apps

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  53. CVE-2026-80080 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  54. CVE-2026-80079 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  55. CVE-2026-80078 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  56. CVE-2026-80076 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  57. CVE-2026-80073 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

  58. CVE-2026-78526 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  59. CVE-2026-78525 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  60. CVE-2026-78524 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.

  61. CVE-2026-78522 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  62. CVE-2026-78521 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  63. CVE-2026-78520 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  64. CVE-2026-78519 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  65. CVE-2026-78518 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  66. CVE-2026-78517 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  67. CVE-2026-78515 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  68. CVE-2026-78514 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  69. CVE-2026-78513 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  70. CVE-2026-78512 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  71. CVE-2026-78511 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  72. CVE-2026-78510 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  73. CVE-2026-78509 9.8 Critique

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  74. CVE-2026-78507 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  75. CVE-2026-78506 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  76. CVE-2026-78505 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  77. CVE-2026-78504 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  78. CVE-2026-78503 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  79. CVE-2026-78502 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  80. CVE-2026-78439 8.8 Élevée

    Microsoft Office 365 for Mac · Microsoft Office for Android · Microsoft Office LTSC for Mac 2021 · Microsoft Office LTSC for Mac 2024

    Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

  81. CVE-2026-77911 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  82. CVE-2026-77908 8.8 Élevée

    Microsoft Dynamics 365 Customer Engagement V9.1 · Microsoft dynamics 365

    Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

  83. CVE-2026-77901 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  84. CVE-2026-77898 7.5 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  85. CVE-2026-72977 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  86. CVE-2026-72976 5.0 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.

  87. CVE-2026-72975 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  88. CVE-2026-72974 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  89. CVE-2026-72973 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  90. CVE-2026-72972 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  91. CVE-2026-72956 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  92. CVE-2026-72938 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  93. CVE-2026-69797 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  94. CVE-2026-69778 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2016

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  95. CVE-2026-69767 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  96. CVE-2026-69764 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  97. CVE-2026-69759 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  98. CVE-2026-69742 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

  99. CVE-2026-69739 7.5 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  100. CVE-2026-69734 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  101. CVE-2026-69722 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  102. CVE-2026-69719 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  103. CVE-2026-69686 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  104. CVE-2026-69678 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  105. CVE-2026-69671 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  106. CVE-2026-69632 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.

  107. CVE-2026-69629 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  108. CVE-2026-69626 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  109. CVE-2026-69614 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2019

    Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  110. CVE-2026-69556 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  111. CVE-2026-69529 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2016

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  112. CVE-2026-69477 7.3 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.

  113. CVE-2026-69442 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  114. CVE-2026-69365 8.0 Élevée

    Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 Version 23H2 · Microsoft Windows 11 Version 24H2

    Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.

  115. CVE-2026-69285 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  116. CVE-2026-65772 8.8 Élevée

    Microsoft Dynamics 365 (on-premises) version 9.1 · Microsoft dynamics 365

    Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

  117. CVE-2026-64918 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.

  118. CVE-2026-62804 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.