Veille CVE

Recherche « Microsoft office 2016 »

349 CVE

  1. CVE-2026-97783 6.1 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  2. CVE-2026-70096 9.8 Critique

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-85875 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  4. CVE-2026-83951 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  5. CVE-2026-83949 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  6. CVE-2026-81960 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  7. CVE-2026-81959 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  8. CVE-2026-81958 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  9. CVE-2026-81957 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  10. CVE-2026-81956 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  11. CVE-2026-81955 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

  12. CVE-2026-81954 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  13. CVE-2026-81953 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  14. CVE-2026-81952 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  15. CVE-2026-81951 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  16. CVE-2026-81950 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  17. CVE-2026-81949 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  18. CVE-2026-81948 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  19. CVE-2026-81947 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  20. CVE-2026-81401 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  21. CVE-2026-81400 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  22. CVE-2026-81399 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  23. CVE-2026-81398 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  24. CVE-2026-81397 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  25. CVE-2026-81396 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  26. CVE-2026-81395 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  27. CVE-2026-81394 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  28. CVE-2026-81393 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  29. CVE-2026-81392 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  30. CVE-2026-81391 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  31. CVE-2026-81390 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  32. CVE-2026-81389 7.0 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  33. CVE-2026-81388 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  34. CVE-2026-81387 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  35. CVE-2026-81386 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  36. CVE-2026-81385 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

  37. CVE-2026-80091 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  38. CVE-2026-80090 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  39. CVE-2026-80089 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  40. CVE-2026-80088 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  41. CVE-2026-80087 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  42. CVE-2026-80085 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  43. CVE-2026-80084 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

  44. CVE-2026-80080 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  45. CVE-2026-80079 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  46. CVE-2026-80073 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

  47. CVE-2026-78526 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  48. CVE-2026-78525 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  49. CVE-2026-78524 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.

  50. CVE-2026-78522 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  51. CVE-2026-78521 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  52. CVE-2026-78520 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  53. CVE-2026-78519 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  54. CVE-2026-78518 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2016 · Microsoft Office 2019

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  55. CVE-2026-78517 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  56. CVE-2026-78515 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  57. CVE-2026-78514 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  58. CVE-2026-78513 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  59. CVE-2026-78512 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  60. CVE-2026-78511 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  61. CVE-2026-78510 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  62. CVE-2026-78509 9.8 Critique

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  63. CVE-2026-78506 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  64. CVE-2026-78505 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  65. CVE-2026-78504 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  66. CVE-2026-78503 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  67. CVE-2026-78502 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  68. CVE-2026-77911 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  69. CVE-2026-77901 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  70. CVE-2026-77504 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  71. CVE-2026-72977 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  72. CVE-2026-72976 5.0 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.

  73. CVE-2026-72975 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  74. CVE-2026-72974 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  75. CVE-2026-72973 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  76. CVE-2026-72972 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  77. CVE-2026-69797 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  78. CVE-2026-69778 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2016

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  79. CVE-2026-69767 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  80. CVE-2026-69764 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  81. CVE-2026-69759 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  82. CVE-2026-69742 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

  83. CVE-2026-69739 7.5 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  84. CVE-2026-69734 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  85. CVE-2026-69722 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  86. CVE-2026-69719 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  87. CVE-2026-69686 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  88. CVE-2026-69678 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  89. CVE-2026-69671 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  90. CVE-2026-69629 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  91. CVE-2026-69626 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  92. CVE-2026-69614 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2019

    Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  93. CVE-2026-69556 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  94. CVE-2026-69529 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2016

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  95. CVE-2026-69477 7.3 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.

  96. CVE-2026-69442 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  97. CVE-2026-69360 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  98. CVE-2026-69285 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  99. CVE-2026-68843 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.

  100. CVE-2026-64918 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.

  101. CVE-2026-62804 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  102. CVE-2026-70105 7.5 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  103. CVE-2026-70329 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  104. CVE-2026-70328 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  105. CVE-2026-70327 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  106. CVE-2026-70324 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  107. CVE-2026-70318 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  108. CVE-2026-70317 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.

  109. CVE-2026-70311 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  110. CVE-2026-70310 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  111. CVE-2026-70306 9.3 Critique

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  112. CVE-2026-68817 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  113. CVE-2026-68816 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  114. CVE-2026-68815 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  115. CVE-2026-68814 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  116. CVE-2026-68812 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  117. CVE-2026-68811 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  118. CVE-2026-68810 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  119. CVE-2026-68809 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  120. CVE-2026-68808 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  121. CVE-2026-68807 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  122. CVE-2026-68806 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  123. CVE-2026-68805 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  124. CVE-2026-68804 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  125. CVE-2026-68803 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  126. CVE-2026-68802 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  127. CVE-2026-68801 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  128. CVE-2026-68799 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  129. CVE-2026-68797 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  130. CVE-2026-68796 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  131. CVE-2026-68795 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  132. CVE-2026-68794 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  133. CVE-2026-68793 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  134. CVE-2026-66810 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  135. CVE-2026-66809 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  136. CVE-2026-66808 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  137. CVE-2026-66806 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  138. CVE-2026-65807 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  139. CVE-2026-65663 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  140. CVE-2026-65661 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  141. CVE-2026-65660 8.8 Élevée Exploitée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  142. CVE-2026-65658 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  143. CVE-2026-64922 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  144. CVE-2026-64921 8.8 Élevée

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  145. CVE-2026-64920 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  146. CVE-2026-64919 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2019

    Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  147. CVE-2026-64917 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  148. CVE-2026-64916 5.4 Moyenne

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint server

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  149. CVE-2026-64915 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  150. CVE-2026-64914 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Access 2016 · Microsoft Access 2016 (32-bit edition) · Microsoft Office 2019

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.