Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-88186 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-88185 | high | 8.1 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-88184 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 2026-10-15 |
| CVE-2026-88183 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | 2026-10-15 |
| CVE-2026-88178 | critical | 9.8 | No | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-88175 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 2026-10-15 |
| CVE-2026-88169 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 2026-10-15 |
| CVE-2026-88167 | medium | 6.5 | No | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 2026-10-15 |
| CVE-2026-88156 | critical | 9.8 | No | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-88154 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | 2026-10-15 |
| CVE-2026-88150 | high | 8.8 | No | Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-88145 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-88144 | high | 8.8 | No | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-83891 | high | 8.8 | No | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-77902 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70302 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70301 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70291 | critical | 9.8 | No | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70287 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70281 | high | 7.5 | No | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | 2026-10-15 |