Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-81389 | high | 7.0 | No | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 2026-09-17 |
| CVE-2026-81388 | high | 7.8 | No | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 2026-09-17 |
| CVE-2026-81387 | medium | 5.5 | No | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disc... | 2026-09-17 |
| CVE-2026-81386 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 2026-09-17 |
| CVE-2026-80091 | medium | 6.5 | No | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-80090 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-80089 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-80088 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-80087 | medium | 6.5 | No | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-80086 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-80085 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-80082 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-80080 | high | 8.8 | No | Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-80078 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-80076 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. | 2026-09-17 |
| CVE-2026-78526 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-78525 | high | 8.8 | No | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-78521 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-78520 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-09-17 |
| CVE-2026-78518 | high | 8.8 | No | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-09-17 |