Octobre 2026

Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter in all versions up to, and including, 44.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The payload is stored in the wpo365_errors transient for up to three days by submitting a crafted unauthenticated request with a forged id_token whose base64url-decoded unique_name or iss claim contains malicious HTML, requiring no prior authentication or user interaction beyond an administrator later visiting the WPO365 wizard page.

WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to `Id_Token_Service_Deprecated::process_openidconnect_token()` using the incompatible WordPress core `wp_verify_nonce()` function to validate a nonce produced by `Nonce_Service::create_nonce()` — a 64-character hex value that `wp_verify_nonce()` can never successfully verify — causing the nonce check to silently fail without terminating authentication, so execution continues into `authenticate_oidc_user()` with the attacker-supplied `id_token`. This makes it possible for unauthenticated attackers who have obtained a previously-issued, valid `id_token` for a target account to replay that token and authenticate as any WordPress user, including administrators, resulting in full site takeover. This vulnerability is only exploitable when the `use_id_token_parser_v2` plugin option is enabled, as this is the configuration that routes token processing through the deprecated parser containing the broken nonce check.