Veille CVE

Recherche « Microsoft word »

153 CVE

Critique 6 Élevée 100 Moyenne 46 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft word » ✕
  1. CVE-2026-114119 9.8 Critique

    Best Practice Software Bp Premier

    Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin, bypass application authentication, and execute operating system commands as SYSTEM.

  2. CVE-2026-108451 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  3. CVE-2026-108450 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  4. CVE-2026-108449 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  5. CVE-2026-108447 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  6. CVE-2026-108445 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  7. CVE-2026-108443 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  8. CVE-2026-108442 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  9. CVE-2026-108441 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  10. CVE-2026-108440 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  11. CVE-2026-108439 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  12. CVE-2026-108438 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC for Mac 2021 · Microsoft Office LTSC for Mac 2024

    Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  13. CVE-2026-108437 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  14. CVE-2026-108436 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  15. CVE-2026-108435 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  16. CVE-2026-108434 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  17. CVE-2026-108433 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

  18. CVE-2026-108432 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  19. CVE-2026-108431 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  20. CVE-2026-108430 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  21. CVE-2026-108429 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  22. CVE-2026-108428 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  23. CVE-2026-108427 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  24. CVE-2026-108426 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  25. CVE-2026-87968 5.3 Moyenne

    Unknown Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant

    The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store with its feed service and exposes it to unauthenticated users, so any visitor can force the store to re-register and overwrite the Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2's stored shop secret.

  26. CVE-2026-97001 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  27. CVE-2026-96996 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  28. CVE-2026-96995 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.

  29. CVE-2026-88210 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2024 · Microsoft Office LTSC for Mac 2021

    Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

  30. CVE-2026-88202 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  31. CVE-2026-88186 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  32. CVE-2026-88185 8.1 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  33. CVE-2026-88169 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  34. CVE-2026-88167 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  35. CVE-2026-88150 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  36. CVE-2026-83891 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  37. CVE-2026-70302 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  38. CVE-2026-70301 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  39. CVE-2026-70300 9.8 Critique

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  40. CVE-2026-70287 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  41. CVE-2026-70269 8.1 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  42. CVE-2026-70268 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  43. CVE-2026-70263 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  44. CVE-2026-70220 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  45. CVE-2026-70206 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  46. CVE-2026-105715 7.5 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  47. CVE-2026-102867 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft 365 apps

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  48. CVE-2026-96765 7.2 Élevée

    WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

    The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter in all versions up to, and including, 44.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The payload is stored in the wpo365_errors transient for up to three days by submitting a crafted unauthenticated request with a forged id_token whose base64url-decoded unique_name or iss claim contains malicious HTML, requiring no prior authentication or user interaction beyond an administrator later visiting the WPO365 wizard page.

  49. CVE-2026-104759 8.1 Élevée

    WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

    The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to `Id_Token_Service_Deprecated::process_openidconnect_token()` using the incompatible WordPress core `wp_verify_nonce()` function to validate a nonce produced by `Nonce_Service::create_nonce()` — a 64-character hex value that `wp_verify_nonce()` can never successfully verify — causing the nonce check to silently fail without terminating authentication, so execution continues into `authenticate_oidc_user()` with the attacker-supplied `id_token`. This makes it possible for unauthenticated attackers who have obtained a previously-issued, valid `id_token` for a target account to replay that token and authenticate as any WordPress user, including administrators, resulting in full site takeover. This vulnerability is only exploitable when the `use_id_token_parser_v2` plugin option is enabled, as this is the configuration that routes token processing through the deprecated parser containing the broken nonce check.

  50. CVE-2026-62367 7.5 Élevée

    go-vikunja vikunja

    Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider `emailfallback` option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local (username+password) account using only the `email` claim from the IdP. The fallback never checks an `email_verified` (or Microsoft `xms_edov`) signal and never requires the matched account's password. An attacker who can obtain a token from the configured issuer carrying a victim's email logs in as that victim with a full session, with no consent or interaction from the victim. Version 2.4.0 fixes the issue.

  51. CVE-2026-107219 7.5 Élevée

    qax-os excelize · Excelize excelize

    Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an attacker-controlled spinCount and performs that many password-key derivation iterations before verifier validation. OpenFile reaches agileDecrypt, which passes the unbounded spinCount to convertPasswdToKey before password verification. When a crafted OLE encrypted-workbook header supplies an excessive spinCount and the file is opened, the key-derivation loop performs unbounded attacker-selected work and cannot be cancelled, allowing an attacker to consume a CPU core for an attacker-controlled duration. No fixed version is available as of this review.

  52. CVE-2026-105763 9.6 Critique

    twentyhq twenty

    Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQL connectedAccounts query returned connectionParameters from ConnectedAccountDTO for every connected account in a workspace, including plaintext IMAP, SMTP, and CalDAV passwords, because the field was not hidden and the lookup did not enforce the calling user's identity or account visibility. A normal workspace member could obtain other members' external-service credentials and use them to access mail or calendars and potentially reset third-party accounts. Google and Microsoft OAuth-only workspaces were not affected. This issue is fixed in version 2.7.0.

  53. CVE-2026-101042 6.4 Moyenne

    parse-community parse-server

    Parse Server is an open-source backend server. In versions >= 9.0.0 < 9.10.1-alpha.10 and >= 8.0.2 < 8.6.91, the code-based authentication adapters (GitHub, Google Play Games, Instagram, LINE, LinkedIn, Microsoft, QQ, Spotify, WeChat, Weibo) verify the client's authorization code with the external provider on signup and on provider linking, but not when authentication data is supplied together with a username and password on the login endpoint. As a result, a low-privileged authenticated user can attach an arbitrary, unverified provider identity to their own account without the provider ever being contacted, spoofing an external identity toward application logic that trusts the linked provider ID. An attacker can also pre-hijack accounts: by claiming the provider ID of a victim who has not yet linked that provider, the victim's later legitimate sign-in with that provider resolves to the attacker's account. Only deployments configuring one of the affected code-based auth adapters are impacted. Versions 9.10.1-alpha.10 and 8.6.91 fix the issue by running the adapter's credential verification on the login and challenge endpoints and rejecting a provider identity already linked to another user. As a workaround, disable the affected code-based auth adapters.

  54. CVE-2026-84458 9.1 Critique

    zammad

    Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setting is enabled, Zammad binds an incoming third-party (SSO) identity to an existing local account by matching the email address the identity provider reports, without verifying that the provider actually confirmed ownership of that email. An attacker who controls any identity at a configured provider, including, by default, any Azure AD tenant via Zammad's multi-tenant Microsoft 365 /common app registration, can set that identity's email to a victim's address, authenticate, and be logged in as the victim. This bypasses the victim's local password entirely and affects any existing account, including agents and administrators. Zammad will honor the xms_edov ID token claim when email verification is required in the Microsoft 365 setting, treating a missing claim as unverified. This issue is fixed in version 7.1.2.

  55. CVE-2026-83951 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  56. CVE-2026-83949 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  57. CVE-2026-81952 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  58. CVE-2026-80090 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  59. CVE-2026-80088 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  60. CVE-2026-80085 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  61. CVE-2026-80080 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  62. CVE-2026-80079 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  63. CVE-2026-78526 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  64. CVE-2026-78525 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  65. CVE-2026-78522 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  66. CVE-2026-78521 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  67. CVE-2026-78520 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  68. CVE-2026-78517 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  69. CVE-2026-78514 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  70. CVE-2026-78512 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  71. CVE-2026-78511 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  72. CVE-2026-78509 9.8 Critique

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  73. CVE-2026-78507 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  74. CVE-2026-78506 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  75. CVE-2026-78504 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  76. CVE-2026-78503 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  77. CVE-2026-78502 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  78. CVE-2026-77911 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  79. CVE-2026-77901 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  80. CVE-2026-77504 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  81. CVE-2026-72976 5.0 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.

  82. CVE-2026-72973 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  83. CVE-2026-72972 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  84. CVE-2026-69764 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  85. CVE-2026-69759 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  86. CVE-2026-69734 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  87. CVE-2026-69722 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  88. CVE-2026-69719 6.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  89. CVE-2026-69686 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  90. CVE-2026-69671 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  91. CVE-2026-69556 8.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  92. CVE-2026-69360 8.8 Élevée

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  93. CVE-2026-69297 6.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2012 · Microsoft Windows Server 2012 (Server Core installation)

    Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network.

  94. CVE-2026-68843 5.5 Moyenne

    Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2

    Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.

  95. CVE-2026-62804 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2016 · Microsoft Office 2019 · Microsoft Office 365 for Mac

    External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  96. CVE-2026-70105 7.5 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  97. CVE-2026-50191 8.8 Élevée

    RARgames 4gaBoards

    4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationEnabled, and ssoRegistrationEnabled are enabled and Google, GitHub, Microsoft, or OIDC SSO is configured. The POST /api/register endpoint permits creation of an unverified local account with a victim's email address, and POST /api/access-tokens permits that account to authenticate while isVerified is false. During the victim's first SSO login, server/api/helpers/users/get-create-one-for-github-sso.js, server/api/helpers/users/get-create-one-for-google-sso.js, server/api/helpers/users/get-create-one-for-microsoft-sso.js, and server/api/helpers/users/get-create-one-for-oidc-sso.js find the attacker-controlled account by email and link the verified SSO identity without confirming ownership of the local account. The attacker can retain local-password access to the linked account and obtain the victim's projects, data, and permissions. This issue is fixed in version 3.3.8.

  98. CVE-2026-70319 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  99. CVE-2026-70318 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  100. CVE-2026-70311 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  101. CVE-2026-70310 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  102. CVE-2026-66810 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  103. CVE-2026-66809 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

  104. CVE-2026-66806 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  105. CVE-2026-64917 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  106. CVE-2026-64915 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  107. CVE-2026-64907 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  108. CVE-2026-64905 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  109. CVE-2026-63531 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  110. CVE-2026-63530 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  111. CVE-2026-63528 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  112. CVE-2026-63527 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  113. CVE-2026-63525 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  114. CVE-2026-63521 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  115. CVE-2026-63518 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  116. CVE-2026-58651 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  117. CVE-2026-15212 8.8 Élevée

    WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)

    The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 43.2. This is due to the Ajax_Service::verify_ajax_request() helper gating its wp_verify_nonce() call behind the boolean option 'enable_nonce_check', which is absent from the default 'wpo365_options' array and therefore evaluates to false via get_global_boolean_var(); as a result, the wp_ajax_wpo365_update_settings handler (Ajax_Service::update_settings) accepts POSTs from cross-origin pages and forwards the attacker-supplied 'settings' payload (base64/JSON) to Options_Service::update_options(), which merges every key/value into wpo365_options without a key allowlist. This makes it possible for unauthenticated attackers to overwrite arbitrary plugin options — including enabling the SCIM REST endpoint (enable_scim), planting an attacker-known scim_secret_token, and setting new_usr_default_role to 'administrator' — via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

  118. CVE-2025-66390 9.8 Critique

    In Microsoft Azure API Management through 2025-10-17, when self-service signup (username/password Basic Authentication) is enabled in Tenant A, an attacker can reuse the registration flow by changing the hostname or tenant identifier to Tenant B, even when Tenant B has signup disabled at the UI level. In other words, disabling signup in the UI does not disable the underlying API endpoint (which still accepts cross-tenant requests based on the Host header). NOTE: The supplier states that they evaluated the report and determined it did not cross a security boundary (i.e., the observed behavior was a configuration/state issue rather than an exploitable product vulnerability affecting tenant isolation). NOTE: The supplier evaluated this report and determined that it did not cross a security boundary (i.e., the observed behavior was a configuration/state issue rather than an exploitable product vulnerability affecting tenant isolation).

  119. CVE-2026-55142 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  120. CVE-2026-55134 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  121. CVE-2026-55132 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  122. CVE-2026-55130 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  123. CVE-2026-55128 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  124. CVE-2026-55127 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  125. CVE-2026-55124 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  126. CVE-2026-55055 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  127. CVE-2026-55050 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  128. CVE-2026-55038 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  129. CVE-2026-55033 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  130. CVE-2026-55032 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  131. CVE-2026-45649 7.1 Élevée

    Microsoft Excel for Android · Microsoft PowerPoint for Android · Microsoft Word for Android · Microsoft excel

    Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally.

  132. CVE-2026-45643 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  133. CVE-2026-45486 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC for Mac 2021 · Microsoft Office LTSC for Mac 2024

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  134. CVE-2026-45471 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  135. CVE-2026-45466 3.3 Faible

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  136. CVE-2026-45458 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  137. CVE-2026-45457 7.8 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 365 for Mac · Microsoft Office LTSC for Mac 2021 · Microsoft Office LTSC for Mac 2024

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  138. CVE-2026-45456 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 365 for Mac · Microsoft Office LTSC 2021

    Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

  139. CVE-2026-44812 7.8 Élevée

    Microsoft Excel for Android · Microsoft PowerPoint for Android · Microsoft Word for Android · Microsoft Windows 10 Version 1607

    Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

  140. CVE-2026-44803 7.8 Élevée

    Microsoft Excel for Android · Microsoft PowerPoint for Android · Microsoft Word for Android · Microsoft Windows 10 Version 1607

    Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

  141. CVE-2026-42832 5.5 Moyenne

    Microsoft Excel for Android · Microsoft Office LTSC for Mac 2021 · Microsoft Office LTSC for Mac 2024 · Microsoft Word for Android

    Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.

  142. CVE-2026-41101 5.5 Moyenne

    Microsoft Word for Android · Microsoft word

    Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.

  143. CVE-2026-41100 4.4 Moyenne

    Microsoft 365 Copilot for Android · Microsoft Excel for Android · Microsoft Loop for Android · Microsoft OneNote for Android

    Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.

  144. CVE-2026-40421 4.3 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  145. CVE-2026-40367 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  146. CVE-2026-40366 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  147. CVE-2026-40364 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  148. CVE-2026-40361 8.4 Élevée

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

  149. CVE-2026-35440 5.5 Moyenne

    Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024

    Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  150. CVE-2017-11826 7.8 Élevée Exploitée

    Microsoft Corporation Microsoft Office · Microsoft office compatibility pack · Microsoft office online server · Microsoft office web apps server

    Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.