365 Apps CVE-2026-44820

Microsoft Office contains a security feature bypass (CVE-2026-21509, CVSS 7.8) where reliance on untrusted inputs in sec

Microsoft Office Word contains a security decision bypass (CVE-2026-21514, CVSS 7.8) through reliance on untrusted input

Use-after-free vulnerability in Microsoft Office Word that allows local, unauthenticated attackers to execute arbitrary

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Rated high severity (C

Use-after-free vulnerability in Microsoft Office Excel that allows local code execution with high severity (CVSS 7.8). A

Use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthenticated local attacker to execute arb

Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.

Microsoft Office Word contains an out-of-bounds read vulnerability that enables local code execution on affected systems

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. [CVSS 8.4 HIGH]

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. [CVSS 8.4 HIGH]

Local code execution in Microsoft Office Word arises from an untrusted pointer dereference (CWE-822) that can be trigger

Local code execution in Microsoft Office Word is possible when a user opens a maliciously crafted document that triggers