Veille CVE

Recherche « Microsoft office long term servicing channel »

20 CVE

  1. CVE-2026-42832 5.5 Moyenne

    Microsoft Excel for Android · Microsoft Office LTSC for Mac 2021 · Microsoft Office LTSC for Mac 2024 · Microsoft Word for Android

    Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.

  2. CVE-2026-42831 7.8 Élevée

    Microsoft Office for Android · Microsoft Office LTSC for Mac 2021 · Microsoft Office LTSC for Mac 2024 · Microsoft 365 copilot

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  3. CVE-2026-40421 4.3 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  4. CVE-2026-40420 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  5. CVE-2026-40419 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  6. CVE-2026-40418 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  7. CVE-2026-40367 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  8. CVE-2026-40366 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  9. CVE-2026-40364 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  10. CVE-2026-40363 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office for Android

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  11. CVE-2026-40362 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  12. CVE-2026-40361 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  13. CVE-2026-40360 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  14. CVE-2026-40359 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Excel 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  15. CVE-2026-40358 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  16. CVE-2026-35440 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  17. CVE-2026-35436 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

  18. CVE-2026-21509 7.8 Élevée Exploitée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

  19. CVE-2023-36761 6.5 Moyenne Exploitée

    Microsoft Office 2019 · Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Word 2016

    Microsoft Word Information Disclosure Vulnerability

  20. CVE-2023-23397 9.8 Critique Exploitée

    Microsoft Office LTSC 2021 · Microsoft Outlook 2016 · Microsoft 365 Apps for Enterprise · Microsoft Office 2019

    Microsoft Outlook Elevation of Privilege Vulnerability