Office 2016
Monthly
Heap-based buffer overflow in Microsoft Office Excel allows a local attacker to execute arbitrary code with the privileges of the victim user by convincing them to open a specially crafted Excel file. The vulnerability spans a wide range of currently supported Office releases - Excel 2016 through Microsoft 365 Apps for Enterprise, plus Office for Mac editions - making the attack surface broad. No public exploit or CISA KEV listing has been identified at time of analysis, but Microsoft has issued patches across all affected channels.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a specially crafted Excel file. Affected products span Excel 2016 through Microsoft 365 Apps for Enterprise and LTSC 2024 editions, including Mac variants. No public exploit code or CISA KEV listing has been identified at time of analysis, and Microsoft has released patches across all affected product lines.
Out-of-bounds read in Microsoft Excel's file-parsing engine allows code execution when a victim opens a specially crafted workbook. Affected builds span Excel 2016 through Office LTSC 2024 and their Mac equivalents, making the exposure broad across both perpetual-license and subscription deployments. No public exploit code has been identified at time of analysis, but Microsoft has released patched builds for all affected product lines.
Out-of-bounds read (CWE-125) in Microsoft Office Excel's file-parsing engine enables local code execution when a victim opens a specially crafted spreadsheet. Affects a wide range of Microsoft Office products from version 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise, on both Windows and Mac platforms. No public exploit identified at time of analysis, but the low attack complexity combined with full confidentiality, integrity, and availability impact makes phishing-delivered document lures a realistic and proven delivery vector.
Use-after-free code execution in Microsoft Excel allows a local unauthenticated attacker to execute arbitrary code at the privilege level of the victim user by enticing them to open a specially crafted workbook file. Affected products span the full current Office portfolio: Excel 2016, Office 2016/2019, Office LTSC 2021/2024 (Windows and Mac), and Microsoft 365 Apps for Enterprise. No public exploit or CISA KEV listing is identified at time of analysis, but Microsoft has released patches addressing all affected version lines.
Stack-based buffer overflow in Microsoft Office Excel enables arbitrary code execution when a user opens a specially crafted workbook. The vulnerability (CWE-121) spans a wide range of Office suites from 2016 through 2024 LTSC on both Windows and macOS. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the broad affected surface - including Microsoft 365 Apps for Enterprise - makes patching a priority for enterprise environments.
Remote code execution in Microsoft Office Word arises from a heap-based buffer overflow (CWE-122) triggered when a user opens a specially crafted document. The flaw affects a broad swath of Office product lines - Microsoft 365 Apps for Enterprise, Office 2016/2019/LTSC 2021/LTSC 2024 on Windows, and Office for Mac variants - with vendor patches available at specific build thresholds. No public exploit code or CISA KEV listing exists at time of analysis, placing this in the category of patched-but-unconfirmed-exploited, though the enormous deployment footprint and phishing-friendly delivery model elevate real-world priority.
Heap-based buffer overflow in Microsoft Excel enables local code execution with full user-level privileges when a victim opens a specially crafted workbook file. Affected products span the entire current Office portfolio - Excel 2016 through Office LTSC 2024 and Microsoft 365 Apps for Enterprise - on both Windows and macOS. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis, but the broad install base and file-delivery attack path make it a meaningful phishing vector.
Double-free memory corruption (CWE-415) in Microsoft Excel enables local arbitrary code execution across a wide range of Office product lines including Excel 2016, Office 2019, LTSC 2021/2024, and Microsoft 365 Apps for Enterprise. An attacker who delivers a specially crafted Excel workbook and convinces a target user to open it can achieve arbitrary code execution in the user's security context, with high confidentiality, integrity, and availability impact. Vendor-released patches are available for all Windows Office variants; no public exploit and no CISA KEV listing have been identified at the time of analysis.
Integer overflow in Microsoft Excel's file parsing engine allows an unauthenticated attacker who delivers a specially crafted Excel workbook to execute arbitrary code with the privileges of the victim user upon file opening. The vulnerability spans Excel 2016 through Microsoft 365 Apps for Enterprise and LTSC variants on both Windows and macOS. No public exploit code has been identified at time of analysis, and Microsoft has issued patches across all affected product lines.
Heap-based buffer overflow (CWE-122) in Microsoft Office Excel allows a local, unauthenticated attacker to execute arbitrary code with the privileges of the victim user by convincing them to open a specially crafted Excel file. The vulnerability affects a broad range of Office releases spanning Excel 2016 through Office LTSC 2024, on both Windows and macOS. Microsoft has released patches addressing this flaw; no public exploit code or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a specially crafted Excel file. Affected products span nearly every current Office release line - Excel 2016, Office 2019, Office LTSC 2021 and 2024 (Windows and Mac), Microsoft 365 Apps for Enterprise, Office 365 for Mac, and Office Online Server. An attacker who tricks a user into opening a malicious workbook can achieve full code execution at the victim's privilege level, with high confidentiality, integrity, and availability impact. No public exploit code has been identified at time of analysis, and no CISA KEV listing exists.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution across nine distinct Office SKUs ranging from Excel 2016 through Microsoft 365 Apps for Enterprise. Exploitation requires a victim to open a specially crafted Excel file, making phishing and malicious-document delivery the primary attack vectors. Microsoft has released patched builds for all affected Windows variants; Mac-platform fixed builds should be confirmed via the MSRC advisory. No public exploit or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a user opens a specially crafted workbook. The vulnerability (CWE-122) affects all major Office perpetual and subscription editions across Windows and Mac, spanning Excel 2016 through Microsoft 365 Apps for Enterprise. No public exploit code has been identified at time of analysis, but the file-open trigger and full C/I/A impact make this a high-priority patch for organizations relying on email-delivered spreadsheets.
Stack-based buffer overflow in Microsoft Office Excel enables arbitrary code execution at the current user's privilege level when a victim opens a specially crafted workbook file. The vulnerability spans Excel 2016 through Microsoft 365 Apps for Enterprise and LTSC 2024 across both Windows and Mac platforms, making the potential victim population extremely large. Microsoft has released patches via MSRC; no public exploit code or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a specially crafted Excel file. Affected products span the full Office portfolio - Excel 2016, Office 2019, 2021, 2024 LTSC editions, and Microsoft 365 Apps for Enterprise on both Windows and Mac. An attacker who can convince a user to open a malicious workbook can achieve full C:H/I:H/A:H compromise of the victim's session. No public exploit or CISA KEV listing has been identified at time of analysis, and Microsoft has released patched builds.
Stack-based buffer overflow in Microsoft Office Excel enables local code execution when a user opens a specially crafted workbook, affecting all major Office product lines from Excel 2016 through Office LTSC 2024 and Microsoft 365 Apps for Enterprise on both Windows and Mac platforms. The vulnerability carries a CVSS 7.8 score reflecting high CIA impact against the Office process, with mandatory user interaction (opening the malicious file) as the sole prerequisite. Microsoft has released patches for all supported versions; no public exploit code or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution across all major Office release tracks when a victim opens a maliciously crafted spreadsheet file. The vulnerability is rooted in improper heap memory management during Excel's file parsing routines (CWE-122), resulting in full compromise of confidentiality, integrity, and availability on the victim system. No public exploit code has been identified at time of analysis, but the breadth of affected versions - spanning Office 2016 through Microsoft 365 and Mac variants - makes this a high-priority patch target for enterprise environments.
Remote code execution in Microsoft Office Word via a heap-based buffer overflow (CWE-122) allows an unauthenticated network attacker to fully compromise a victim system upon opening a crafted document. All major Office licensing tracks are affected on both Windows and macOS, spanning Office 2016 through Microsoft 365 Apps for Enterprise. No CISA KEV listing or public exploit code is referenced in available data, but the low-complexity, no-privileges-required vector with full confidentiality, integrity, and availability impact makes this a critical priority for enterprise patch cycles.
Out-of-bounds write (CWE-787) in multiple Microsoft Office versions enables remote code execution when a victim opens a specially crafted Office document. The vulnerability affects a broad matrix of products spanning Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2016/2019, and their Mac counterparts, covering virtually the entire modern Office product line. Vendor patches have been released via MSRC; no public exploit or CISA KEV listing has been identified at time of analysis, but the network-deliverable, low-complexity nature and full C/I/A impact make this a high-priority patching target.
Out-of-bounds read in Microsoft Office Excel enables remote code execution when a victim opens a crafted Excel workbook, achieving full C/I/A compromise on the target system. The vulnerability spans every major Office product line from Excel 2016 through Microsoft 365 Apps for Enterprise on both Windows and macOS. Vendor-released patches are available for all Windows product lines with specific fixed builds enumerated; no public exploit code or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Microsoft Word's document-parsing engine, arising from a numeric truncation error, enables remote code execution when a user opens a specially crafted Word document. The flaw spans a wide matrix of Office SKUs on both Windows and Mac - including Office 2016, 2019, LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and Mac variants - and carries CVSS 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), reflecting full compromise with the only friction being the required user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis, but the ubiquity of the Office install base makes this a high-priority patching target.
Heap-based buffer overflow in Microsoft Word (Microsoft 365 Apps for Enterprise, Office 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and the corresponding macOS Office builds) enables arbitrary code execution in the security context of the user who opens an attacker-crafted Word document. The attack is client-side: a victim must open or preview a malicious file delivered by email, web download, or a shared location, and no authentication or elevated privileges on the target are required (PR:N), though our assessment sets the interaction requirement at UI:R despite the UI:N flag in the published vector. No public exploit code has been identified at time of analysis and EPSS is low (0.95%, 59th percentile), but CISA SSVC rates the technical impact as total with automatable exploitation and vendor patches are available, making this a genuinely notable issue rather than an emergency.
Heap-based buffer overflow in Microsoft Office allows unauthenticated remote attackers to execute arbitrary code on a victim's system when the victim opens a specially crafted Office document. Multiple product lines are affected, including Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2016/2019, and Mac variants of each. With a CVSS score of 8.8 and full confidentiality, integrity, and availability impact, this is a high-severity code execution path; no public exploit code or CISA KEV listing has been identified at time of analysis, and a vendor-released patch is available.
Heap-based buffer overflow in Microsoft Office Word's document-parsing engine enables remote code execution when a victim opens a specially crafted file, yielding full confidentiality, integrity, and availability compromise of the user's session. Affected products span Microsoft 365 Apps for Enterprise, Office 2019, Office LTSC 2021, Office LTSC 2024, Word 2016, and corresponding macOS editions across both x86 and x64 architectures. No public exploit identified at time of analysis, but the AV:N/PR:N/UI:R CVSS pattern is historically associated with rapid phishing-campaign weaponization for Office document vulnerabilities.
Heap-based buffer overflow (CWE-122) in Microsoft Office Access enables network-delivered remote code execution across six Microsoft Office product lines. When a victim opens a maliciously crafted Access database file delivered over a network, the overflow corrupts heap memory and allows an attacker to execute arbitrary code with the privileges of the logged-in user. No public exploit code or CISA KEV listing has been identified at time of analysis, and Microsoft has released patched builds for all affected product lines.
Heap-based buffer overflow in Microsoft Office Word enables remote code execution across all currently-supported Office editions when a victim opens a specially crafted document. Affecting Microsoft 365 Apps for Enterprise, Office 2016 through 2024 LTSC on both x86 and x64 platforms, the vulnerability requires no attacker privileges but depends on user interaction - the classic malicious-document delivery model. No public exploit code or CISA KEV listing has been identified at time of analysis, though the CVSS 8.8 rating, full confidentiality/integrity/availability impact, and the near-universal enterprise footprint of Microsoft Office make this a high-priority patching candidate.
Out-of-bounds read in Microsoft Office (2016 through 365 Apps for Enterprise and LTSC 2024) enables an unauthenticated remote attacker to disclose sensitive memory contents over a network, per the provided CVSS vector. Affected products span both perpetual-license and subscription editions across x64 and x86 architectures. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, and Microsoft has released patches across all affected version lines.
Heap-based buffer overflow (CWE-122) in Microsoft Office Word enables unauthenticated remote code execution when a victim opens a specially crafted document. All currently supported Office product lines are affected across Windows (x86/x64) and macOS, including Microsoft 365 Apps for Enterprise, Office 2016, 2019, 2021 LTSC, 2024 LTSC, and Microsoft 365 for Mac. No public exploit code or CISA KEV listing has been identified at time of analysis, but the breadth of affected products and full C/I/A impact make this a high-priority patching item across virtually all enterprise environments.
Heap-based buffer overflow in Microsoft Office Access enables remote code execution when a user opens a specially crafted Access database file. The CVSS 8.8 vector (AV:N/AC:L/PR:N/UI:R) confirms unauthenticated network delivery requiring only a single user interaction - consistent with a malicious file attachment or download attack pattern. No public exploit code or CISA KEV listing has been identified at time of analysis, but the full-triad impact (C:H/I:H/A:H) and broad affected version range spanning Office 2016 through Microsoft 365 Apps make this a high-priority patch-cycle item.
Remote code execution in Microsoft Office exposes unauthenticated network attackers to full system compromise when a target user opens a specially crafted document. The root cause is a heap-based buffer overflow (CWE-122) in Office's document parsing logic, affecting Office 2016 through Microsoft 365 Apps for Enterprise across a defined range of 16.x builds confirmed by EUVD-2026-73711. No public exploit or CISA KEV listing has been identified at time of analysis, but the CVSS 8.8 score with a network attack vector and no required attacker privileges - beyond inducing user file-open interaction - reflects a credible, high-impact threat against the world's most widely deployed office productivity suite.
Heap-based buffer overflow in Microsoft Office enables remote unauthenticated attackers to achieve arbitrary code execution by convincing a target user to open a specially crafted Office document delivered over a network. All major Office perpetual and subscription releases are affected, spanning versions from Office 2016 through Microsoft 365 Apps for Enterprise and LTSC 2024. Vendor-released patches are available via Microsoft Security Response Center; no public exploit code or CISA KEV listing has been identified at time of analysis, though the high-impact, low-complexity CVSS profile warrants prioritized patching in enterprise environments.
External file path control in Microsoft Office Word enables local code execution with full confidentiality, integrity, and availability impact when a target user opens a specially crafted document. All major Office release tracks are affected across Windows and macOS - Office 2016, 2019, 2021 LTSC, LTSC 2024, and Microsoft 365 Apps for Enterprise. No public exploit has been identified at time of analysis, and vendor patches are available through the Office security release channel.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a specially crafted workbook, resulting in full compromise of confidentiality, integrity, and availability on the local system. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) confirms no attacker privileges are required, though user interaction - opening the malicious file - is a hard prerequisite. No public exploit code or CISA KEV listing has been identified at time of analysis; the issue is confirmed by Microsoft's Security Response Center via secure@microsoft.com.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a specially crafted Excel file. The attack requires no privileges from the attacker but does require user interaction - consistent with a malicious document delivery vector - and carries high impact across confidentiality, integrity, and availability. No active exploitation (KEV) or public exploit code has been identified in the provided intelligence at time of analysis.
Heap-based buffer overflow in Microsoft Office enables local code execution when a user opens a specially crafted document, affecting multiple product lines including Office 2016 through Microsoft 365 Apps for Enterprise. The vulnerability carries a CVSS 7.8 (High) score and achieves full confidentiality, integrity, and availability compromise on the victim system. No public exploit code has been identified at time of analysis, and Microsoft has released patches via the standard Office Security Releases channel.
Heap-based buffer overflow in Microsoft Office, rooted in an integer underflow during document parsing, enables local code execution with high confidentiality, integrity, and availability impact when a user opens a specially crafted file. All major Office release channels on both Windows and Mac are affected, including Microsoft 365 Apps for Enterprise, Office LTSC 2024/2021/2019/2016, and their Mac equivalents. No public exploit has been identified at time of analysis, but a vendor-released patch is available via the Microsoft Security Response Center.
Local code execution in Microsoft Office stems from an integer overflow that cascades into a heap-based buffer overflow (CWE-122), affecting Office 2016 through LTSC 2024 on both Windows and macOS. An unauthenticated attacker who can convince a target user to open a crafted Office document gains full code execution with the victim's privilege level - achieving high confidentiality, integrity, and availability impact per the CVSS:3.1 AV:L/C:H/I:H/A:H rating. No public exploit code or CISA KEV listing was identified at time of analysis, but the patch is vendor-confirmed and available via Microsoft's Security Update Guide.
Heap-based buffer overflow in Microsoft Office allows local code execution across a wide range of Office versions on both Windows and macOS when a victim opens a specially crafted document. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms that no privileges are required - only that a user interacts with malicious content - making this practically reachable via phishing or drive-by document delivery despite the local attack vector. No active exploitation has been confirmed in CISA KEV, and no public exploit code has been identified at time of analysis; a vendor-released patch is available.
Local code execution in Microsoft Office results from an integer overflow that leads to a heap-based buffer overflow (CWE-122), enabling an attacker to run arbitrary code at the privilege level of the logged-in user. Affected products span multiple Windows and Mac release tracks including Office 2016, 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise. No public exploit or CISA KEV listing is present in the available data; however, the complete high CIA triad and wide deployment footprint make this a priority patching target.
Stack-based buffer overflow in Microsoft Office (CWE-121) enables local code execution across a broad range of affected builds including Office 2016, 2019, LTSC 2021, LTSC 2024, Office 365 for Mac, LTSC for Mac 2021/2024, and Microsoft 365 Apps for Enterprise. Exploitation requires user interaction - consistent with a maliciously crafted document delivery model - and achieves full confidentiality, integrity, and availability compromise within the Office process context. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor-released patch is available via the MSRC advisory.
Out-of-bounds read (CWE-125) in Microsoft Office enables local code execution across a broad range of Office product editions on both Windows and macOS. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms the attack requires no privileges but does require a victim to open a crafted file, consistent with a malicious document delivery scenario. A patch has been released by Microsoft; no public exploit code or CISA KEV listing has been identified at the time of analysis, though the full CIA impact (C:H/I:H/A:H) and breadth of affected products make this a high-priority patching target for enterprise environments.
Heap-based buffer overflow in Microsoft Office enables local code execution with high impact across confidentiality, integrity, and availability. Affecting Office 2016 through 2024, including LTSC and Microsoft 365 variants on both Windows and macOS, the vulnerability is triggered when a user opens a specially crafted document - requiring no privileges but mandatory user interaction (CVSS AV:L/UI:R). Patch is available from Microsoft; no public exploit identified at time of analysis.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-822) that triggers when a user opens a maliciously crafted document. The CVSS 7.8 vector (AV:L/AC:L/PR:N/UI:R) reflects a classic client-side file-format attack requiring user interaction but no prior authentication, yielding full confidentiality, integrity, and availability impact on the targeted workstation. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but Office document parsers are historically high-value targets and the vulnerability was reported by Microsoft's own MSRC team.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-122) that an unauthenticated attacker can trigger when a user opens a crafted document. The CVSS 3.1 base score of 7.8 reflects high impact to confidentiality, integrity, and availability, with required user interaction limiting mass exploitation. There is no public exploit identified at time of analysis and the issue is not currently listed on the CISA KEV catalog.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow that an unauthorized attacker can trigger without user interaction. The flaw carries a CVSS 3.1 score of 8.4 with high impact across confidentiality, integrity, and availability, and no public exploit identified at time of analysis. Despite requiring local access, the absence of authentication and user-interaction requirements makes this a notable priority for endpoint patching cycles.
Local code execution in Microsoft Office via a heap-based buffer overflow allows an unauthorized attacker to run arbitrary code with the privileges of the user opening a malicious document. The CVSS vector (AV:L/PR:N/UI:N) indicates local attack vector without required authentication or user interaction, an unusual combination that warrants verification against the vendor advisory. No public exploit identified at time of analysis and the issue is not currently listed in CISA KEV.
Local code execution in Microsoft Office is possible via a heap-based buffer overflow that an unauthorized attacker can trigger without user interaction, yielding full confidentiality, integrity, and availability impact on the host. The flaw is rated 8.4 (CVSS:3.1) and was disclosed by Microsoft's Security Response Center, but no public exploit has been identified at the time of analysis. Despite the CWE-121 tagging as a stack overflow, the description and CWE-122 class indicate the corruption occurs on the heap, so defenders should treat this as a memory-corruption RCE-class issue requiring prompt patching.
Local code execution in Microsoft Office via a heap-based buffer overflow that lets an unauthorized attacker run arbitrary code in the context of the current user. The flaw carries a CVSS 8.4 rating driven by high impact across confidentiality, integrity, and availability, and no public exploit identified at time of analysis. Despite the 'unauthorized' wording, the CVSS vector specifies a local attack vector, indicating the attacker must already be able to deliver a crafted file or run code on the target system.
Local code execution in Microsoft Office stems from a type confusion (CWE-843) flaw that allows an unauthenticated attacker with local access to run arbitrary code in the context of the Office process. The CVSS 8.4 score reflects high impact on confidentiality, integrity, and availability without requiring privileges or user interaction, though the attack vector is local. No public exploit is identified at time of analysis and the issue is not listed in CISA KEV.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-122) that triggers when a user opens or previews a maliciously crafted document. The CVSS 7.8 score reflects local attack vector with required user interaction, and no public exploit identified at time of analysis. Successful exploitation yields full confidentiality, integrity, and availability impact in the context of the current user.
Local code execution in Microsoft Office is possible when a user opens a maliciously crafted document that triggers a heap-based buffer overflow (CWE-122), allowing the attacker to run arbitrary code in the context of the opened Office process. The CVSS 7.8 (AV:L/AC:L/PR:N/UI:R) reflects a user-interaction-driven local exploit rather than a remote network attack, and no public exploit identified at time of analysis. The flaw was reported through Microsoft Security Response Center (secure@microsoft.com) and is tracked in MSRC's update guide.
Microsoft Outlook Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Out-of-bounds read in Microsoft Office Excel's file parser allows a local attacker to disclose process memory contents when a victim opens a specially crafted Excel document. Affected across all major release channels including Excel 2016, Office 2019, LTSC 2021, LTSC 2024, Microsoft 365 Apps for Enterprise, and Mac variants. No public exploit has been identified at time of analysis, and SSVC classifies exploitation as none with non-automatable delivery.
Uninitialized resource use (CWE-908) in Microsoft Excel allows a local attacker to disclose process memory contents when a user opens a specially crafted workbook. Affected products span Excel 2016 through Microsoft 365 Apps for Enterprise on both Windows and macOS, with vendor patches released across all Windows builds. No public exploit has been identified and SSVC rates exploitation as none with partial technical impact, placing real-world risk firmly in the moderate range despite the C:H CVSS metric.
Type confusion (CWE-843) in Microsoft Office Excel enables local information disclosure when a victim opens a specially crafted Excel file. Affected products span Excel 2016, Office 2019, Office LTSC 2021/2024, Microsoft 365 Apps for Enterprise, Office Online Server, and multiple Mac Office variants. The vulnerability carries a CVSS 5.5 with High confidentiality impact but no integrity or availability impact; no public exploit or active exploitation has been identified at time of analysis.
Out-of-bounds memory read in Microsoft Excel exposes potentially sensitive in-process memory contents when a user opens a specially crafted workbook. Affects a wide range of Office versions including Microsoft 365 Apps for Enterprise, Office 2016 through LTSC 2024, and Office for Mac editions. SSVC assessment rates exploitation as none with non-automatable attack delivery, and Microsoft has released patches addressing all affected branches. No public exploit or CISA KEV listing exists at time of analysis.
Buffer over-read (CWE-126) in Microsoft Office Excel allows a local attacker to disclose potentially sensitive process memory when a user opens a crafted Excel workbook. The flaw spans a broad range of Office versions from 2016 through LTSC 2024, including Microsoft 365 Apps for Enterprise and Mac variants, making the affected footprint very large. No public exploit code or CISA KEV listing has been identified; exploitation depends on social engineering to deliver a malicious file to the local system.
Out-of-bounds read in Microsoft Excel allows a local, unauthenticated attacker to disclose potentially sensitive memory contents by convincing a user to open a specially crafted workbook. Affected builds span Excel 2016 through Microsoft 365 Apps for Enterprise on both Windows and macOS. No public exploit code exists and CISA SSVC rates exploitation as 'none' with partial technical impact, making this a moderate-priority patch-cycle item rather than an urgent emergency.
Sensitive system information disclosure in Microsoft Excel allows a local, unauthenticated attacker to read high-confidentiality data when a victim opens a specially crafted spreadsheet. Affecting Office 2016 through LTSC 2024 on both Windows and Mac, the flaw (CWE-497) exposes internal system data - such as memory layout, environment variables, or path information - to an unauthorized control sphere during file parsing. No public exploit has been identified at time of analysis, and Microsoft has released patches across all affected product lines.
Out-of-bounds read in Microsoft Excel discloses sensitive memory contents when a victim opens a specially crafted Excel file. The vulnerability spans a wide range of affected versions including Excel 2016, Office 2019, LTSC 2021/2024, Office 365 for Mac, and Microsoft 365 Apps for Enterprise, making the patch surface broad across enterprise environments. No public exploit or active exploitation has been identified at time of analysis; vendor patch is available via MSRC.
Out-of-bounds read in Microsoft Excel across Office 2016 through 365 Apps for Enterprise permits a local, unauthenticated attacker to disclose sensitive memory contents when a victim opens a specially crafted spreadsheet file. The vulnerability carries a CVSS 5.5 score reflecting the local delivery requirement and confidentiality-only impact, with no integrity or availability consequences. No public exploit code or active exploitation has been identified at time of analysis, and vendor patches are available for all major Windows Office editions.
Uninitialized memory disclosure in Microsoft Excel exposes potentially sensitive heap or stack contents when a victim opens a crafted document, allowing an unauthenticated attacker to read process memory with high confidentiality impact. Affected product lines span Excel 2016 through Microsoft 365 Apps for Enterprise and multiple Mac variants, making this a broad-surface vulnerability. No public exploit code and no CISA KEV listing have been identified at time of analysis; SSVC assessment rates exploitation as 'none' with non-automatable delivery, limiting realistic risk to targeted document-delivery campaigns.
Out-of-bounds read in Microsoft Office Excel's file parser allows local information disclosure when a victim opens a specially crafted workbook. Affecting Excel 2016 through Microsoft 365 Apps for Enterprise, Office LTSC 2024, Office Online Server, and multiple macOS Office variants, the vulnerability (CWE-125) exposes process memory with high confidentiality impact but no integrity or availability consequences. Microsoft has released patched builds via MSRC; SSVC confirms no active exploitation and non-automatable delivery, placing this squarely within standard monthly patch-cycle priority.
Microsoft Office Excel exposes sensitive system information to an unauthorized control sphere (CWE-497), enabling local information disclosure when a victim opens a specially crafted Excel file. The vulnerability spans Excel 2016 through Microsoft 365 Apps for Enterprise and multiple LTSC editions on both Windows and Mac. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, though the C:H CVSS confidentiality rating indicates the quality or quantity of information that can be exfiltrated is significant.
Uninitialized resource use (CWE-908) in Microsoft Office exposes high-confidentiality data to remote unauthenticated attackers when a victim opens a specially crafted Office document. The vulnerability spans the full Microsoft Office ecosystem - Office 2016, 2019, LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and Mac variants - making the affected surface extremely broad. No public exploit code and no active exploitation have been identified at time of analysis; Microsoft has released patches across all affected product lines.
Out-of-bounds read in Microsoft Office (CWE-125) allows a remote unauthenticated attacker to disclose sensitive memory contents when a victim opens a specially crafted document. Affected products span Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2016/2019, and their Mac counterparts - covering virtually the entire active Office install base. No public exploit code or active exploitation has been identified; SSVC rates the exploitation likelihood as none and technical impact as partial, consistent with the 6.5 CVSS base score.
Out-of-bounds read in Microsoft Word across Office 2016 through Microsoft 365 Apps enables an unauthenticated remote attacker to disclose sensitive memory contents when a user opens a crafted document. The vulnerability (CWE-125) affects both Windows (x86/x64) and macOS deployments of the Office suite across multiple release tracks - retail, LTSC, and subscription. No public exploit or active exploitation has been identified at time of analysis, though the broad install base and socially-engineered document delivery make this a realistic phishing vector.
Heap-based buffer overflow in Microsoft Office leaks sensitive memory contents to unauthenticated network attackers when a victim opens a specially crafted document. Affected products span Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise on both Windows and macOS, making the exposure surface extremely broad. Vendor-released patches are available; no public exploit or CISA KEV listing has been identified at time of analysis, but the low-complexity, no-privilege vector warrants prompt patching across enterprise fleets.
Out-of-bounds read (CWE-125) in Microsoft Office Outlook allows a remote unauthenticated attacker to leak process memory contents when a victim opens or previews a crafted email message or attachment. All major Office branches are affected - Office 2016, 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise - spanning hundreds of millions of endpoints globally. Microsoft has released patches across all affected branches; no public exploit code exists and CISA SSVC rates exploitation as 'none' at the time of analysis.
Out-of-bounds read in Microsoft Excel enables an unauthenticated remote attacker to disclose sensitive memory contents when a victim opens a crafted Excel file. The vulnerability spans a broad range of Office product lines - including Office 2016, 2019, 2021 LTSC, 2024 LTSC, Microsoft 365 Apps for Enterprise, and Mac variants - making the exposure surface wide. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; a vendor patch is available via Microsoft's update guide.
Buffer over-read (CWE-126) in Microsoft Office Excel's file parsing engine allows remote information disclosure when a user opens a crafted spreadsheet file. Affected versions span Office 2016 through Office 2024 LTSC and Microsoft 365 Apps for Enterprise across Windows and Mac platforms, with fixed builds confirmed for Windows variants per EUVD-2026-73733. No public exploit code has been identified at time of analysis, and SSVC rates current exploitation as none with partial technical impact, consistent with the absence of a CISA KEV listing.
Integer overflow in Microsoft Office Word's document parsing engine triggers an out-of-bounds read (CWE-125), enabling a remote unauthenticated attacker to disclose potentially sensitive memory contents by inducing a victim to open a specially crafted document. Affected products span Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise on both Windows and macOS. Microsoft has released patches across all affected versions; no confirmed active exploitation or public exploit code has been identified at time of analysis.
Buffer over-read (CWE-126) in Microsoft Office exposes process memory contents to remote unauthenticated attackers when a victim opens a maliciously crafted Office document. The vulnerability spans a wide range of Office product lines across both Windows and macOS - including Office 2016, 2019, LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and the macOS Office 365/LTSC equivalents. No public exploit code has been identified and the CVE does not appear in the CISA KEV catalog at time of analysis; a vendor patch has been released across all affected product lines.
Insufficiently protected credential transmission in Microsoft Office exposes NTLM or equivalent credential material to a network-adjacent attacker via a crafted document or resource link. Affected versions span the entire active Office portfolio - Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise - making the exposure broadly relevant. An unauthenticated remote attacker who can induce a user to open a specially crafted Office file or embedded resource can capture credential hashes suitable for relay or offline cracking, constituting a practical spoofing primitive. No public exploit code or CISA KEV listing has been identified at the time of analysis, though Microsoft has released patches.
Uninitialized memory disclosure in Microsoft Office exposes sensitive process memory to local attackers who can deliver a crafted document. Affecting a broad range of Office versions across Windows and macOS - including Microsoft 365 Apps for Enterprise, Office 2016 through LTSC 2024, and Office 365 for Mac - the flaw yields high confidentiality impact with no integrity or availability loss. No public exploit code or CISA KEV listing has been identified at time of analysis; Microsoft has issued patches via the August 2026 update cycle.
Information disclosure in Microsoft Excel arises from use of uninitialized memory (CWE-908), exposing potentially sensitive heap or stack contents to an attacker when a victim opens a maliciously crafted Excel file. Affected products span the full Microsoft Office portfolio on both Windows and macOS, including Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2019, Excel 2016, and their Mac counterparts. No public exploit identified at time of analysis; vendor-released patches are available via the Microsoft Security Response Center.
Out-of-bounds read in Microsoft Excel enables local information disclosure when a user opens a specially crafted spreadsheet. Multiple product lines are affected across Windows and macOS, spanning Excel 2016, Office 2019, LTSC 2021, LTSC 2024, Office 365 for Mac, and Microsoft 365 Apps for Enterprise. Microsoft has released patches; no public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Out-of-bounds memory read in Microsoft Office exposes potentially sensitive process memory contents when a victim opens a specially crafted document locally. The vulnerability affects the full Office suite across Windows and macOS - spanning Office 2016 through LTSC 2024, Office 365 for Mac, and Microsoft 365 Apps for Enterprise - with High confidentiality impact per CVSS but no integrity or availability consequence. No public exploit has been identified at time of analysis; CISA SSVC classifies exploitation status as none and the attack is not automatable, significantly reducing real-world prioritization urgency despite the High C rating.
Out-of-bounds read (CWE-125) in Microsoft Office enables a local, unauthenticated attacker to disclose sensitive memory contents by convincing a user to open a specially crafted Office document. Affected products span the full modern Office portfolio - Office 2016 through Office LTSC 2024 and Microsoft 365 Apps for Enterprise. No public exploit code has been identified at time of analysis, and CISA SSVC rates exploitation as 'none' with non-automatable delivery, placing this in a lower operational urgency tier despite the High confidentiality impact rating.
Out-of-bounds read (CWE-125) in Microsoft Office exposes sensitive memory contents to local attackers who can persuade a user to open a specially crafted document. Affected products span multiple Office generations including Office 2016, 2019, 2021, 2024, LTSC variants, and Microsoft 365 Apps for Enterprise on both Windows and macOS. No public exploit has been identified at time of analysis, and CISA SSVC rates exploitation status as none with non-automatable delivery, aligning with the local, user-interaction-dependent CVSS vector.
Out-of-bounds read in Microsoft Office exposes sensitive in-process memory contents to local attackers who socially engineer a victim into opening a crafted document. The flaw spans the full Microsoft Office portfolio across Windows and macOS - from Office 2016 through Microsoft 365 Apps for Enterprise - making it broadly relevant for enterprise patch management. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis; vendor patch is confirmed available.
Out-of-bounds read in Microsoft Office and SharePoint Server exposes low-level memory contents to a local attacker when a victim opens a crafted document. Affected products span Microsoft 365 Apps for Enterprise, Office 2016/2019/LTSC 2021/2024, Office for Mac variants, and SharePoint Server 2016/2019/Subscription Edition - all at version 16.0.x baselines. The CVSS score of 3.3 (Low) reflects constrained impact: confidentiality is only partially affected, integrity and availability are untouched, and exploitation requires both local access and user interaction. No public exploit identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Out-of-bounds read in Microsoft Office triggers local information disclosure when a victim opens a crafted document, exposing adjacent memory contents with high confidentiality impact. The vulnerability spans a wide product surface including Office 2016 through LTSC 2024, Microsoft 365 Apps for Enterprise, multiple SharePoint Server versions, and Mac variants, as confirmed by EUVD-2026-35664. No public exploit or CISA KEV listing is identified at time of analysis; vendor-released patches are available across affected product lines.
Heap-based buffer overflow in Microsoft Office Excel allows a local attacker to execute arbitrary code with the privileges of the victim user by convincing them to open a specially crafted Excel file. The vulnerability spans a wide range of currently supported Office releases - Excel 2016 through Microsoft 365 Apps for Enterprise, plus Office for Mac editions - making the attack surface broad. No public exploit or CISA KEV listing has been identified at time of analysis, but Microsoft has issued patches across all affected channels.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a specially crafted Excel file. Affected products span Excel 2016 through Microsoft 365 Apps for Enterprise and LTSC 2024 editions, including Mac variants. No public exploit code or CISA KEV listing has been identified at time of analysis, and Microsoft has released patches across all affected product lines.
Out-of-bounds read in Microsoft Excel's file-parsing engine allows code execution when a victim opens a specially crafted workbook. Affected builds span Excel 2016 through Office LTSC 2024 and their Mac equivalents, making the exposure broad across both perpetual-license and subscription deployments. No public exploit code has been identified at time of analysis, but Microsoft has released patched builds for all affected product lines.
Out-of-bounds read (CWE-125) in Microsoft Office Excel's file-parsing engine enables local code execution when a victim opens a specially crafted spreadsheet. Affects a wide range of Microsoft Office products from version 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise, on both Windows and Mac platforms. No public exploit identified at time of analysis, but the low attack complexity combined with full confidentiality, integrity, and availability impact makes phishing-delivered document lures a realistic and proven delivery vector.
Use-after-free code execution in Microsoft Excel allows a local unauthenticated attacker to execute arbitrary code at the privilege level of the victim user by enticing them to open a specially crafted workbook file. Affected products span the full current Office portfolio: Excel 2016, Office 2016/2019, Office LTSC 2021/2024 (Windows and Mac), and Microsoft 365 Apps for Enterprise. No public exploit or CISA KEV listing is identified at time of analysis, but Microsoft has released patches addressing all affected version lines.
Stack-based buffer overflow in Microsoft Office Excel enables arbitrary code execution when a user opens a specially crafted workbook. The vulnerability (CWE-121) spans a wide range of Office suites from 2016 through 2024 LTSC on both Windows and macOS. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the broad affected surface - including Microsoft 365 Apps for Enterprise - makes patching a priority for enterprise environments.
Remote code execution in Microsoft Office Word arises from a heap-based buffer overflow (CWE-122) triggered when a user opens a specially crafted document. The flaw affects a broad swath of Office product lines - Microsoft 365 Apps for Enterprise, Office 2016/2019/LTSC 2021/LTSC 2024 on Windows, and Office for Mac variants - with vendor patches available at specific build thresholds. No public exploit code or CISA KEV listing exists at time of analysis, placing this in the category of patched-but-unconfirmed-exploited, though the enormous deployment footprint and phishing-friendly delivery model elevate real-world priority.
Heap-based buffer overflow in Microsoft Excel enables local code execution with full user-level privileges when a victim opens a specially crafted workbook file. Affected products span the entire current Office portfolio - Excel 2016 through Office LTSC 2024 and Microsoft 365 Apps for Enterprise - on both Windows and macOS. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog at time of analysis, but the broad install base and file-delivery attack path make it a meaningful phishing vector.
Double-free memory corruption (CWE-415) in Microsoft Excel enables local arbitrary code execution across a wide range of Office product lines including Excel 2016, Office 2019, LTSC 2021/2024, and Microsoft 365 Apps for Enterprise. An attacker who delivers a specially crafted Excel workbook and convinces a target user to open it can achieve arbitrary code execution in the user's security context, with high confidentiality, integrity, and availability impact. Vendor-released patches are available for all Windows Office variants; no public exploit and no CISA KEV listing have been identified at the time of analysis.
Integer overflow in Microsoft Excel's file parsing engine allows an unauthenticated attacker who delivers a specially crafted Excel workbook to execute arbitrary code with the privileges of the victim user upon file opening. The vulnerability spans Excel 2016 through Microsoft 365 Apps for Enterprise and LTSC variants on both Windows and macOS. No public exploit code has been identified at time of analysis, and Microsoft has issued patches across all affected product lines.
Heap-based buffer overflow (CWE-122) in Microsoft Office Excel allows a local, unauthenticated attacker to execute arbitrary code with the privileges of the victim user by convincing them to open a specially crafted Excel file. The vulnerability affects a broad range of Office releases spanning Excel 2016 through Office LTSC 2024, on both Windows and macOS. Microsoft has released patches addressing this flaw; no public exploit code or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a specially crafted Excel file. Affected products span nearly every current Office release line - Excel 2016, Office 2019, Office LTSC 2021 and 2024 (Windows and Mac), Microsoft 365 Apps for Enterprise, Office 365 for Mac, and Office Online Server. An attacker who tricks a user into opening a malicious workbook can achieve full code execution at the victim's privilege level, with high confidentiality, integrity, and availability impact. No public exploit code has been identified at time of analysis, and no CISA KEV listing exists.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution across nine distinct Office SKUs ranging from Excel 2016 through Microsoft 365 Apps for Enterprise. Exploitation requires a victim to open a specially crafted Excel file, making phishing and malicious-document delivery the primary attack vectors. Microsoft has released patched builds for all affected Windows variants; Mac-platform fixed builds should be confirmed via the MSRC advisory. No public exploit or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a user opens a specially crafted workbook. The vulnerability (CWE-122) affects all major Office perpetual and subscription editions across Windows and Mac, spanning Excel 2016 through Microsoft 365 Apps for Enterprise. No public exploit code has been identified at time of analysis, but the file-open trigger and full C/I/A impact make this a high-priority patch for organizations relying on email-delivered spreadsheets.
Stack-based buffer overflow in Microsoft Office Excel enables arbitrary code execution at the current user's privilege level when a victim opens a specially crafted workbook file. The vulnerability spans Excel 2016 through Microsoft 365 Apps for Enterprise and LTSC 2024 across both Windows and Mac platforms, making the potential victim population extremely large. Microsoft has released patches via MSRC; no public exploit code or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a specially crafted Excel file. Affected products span the full Office portfolio - Excel 2016, Office 2019, 2021, 2024 LTSC editions, and Microsoft 365 Apps for Enterprise on both Windows and Mac. An attacker who can convince a user to open a malicious workbook can achieve full C:H/I:H/A:H compromise of the victim's session. No public exploit or CISA KEV listing has been identified at time of analysis, and Microsoft has released patched builds.
Stack-based buffer overflow in Microsoft Office Excel enables local code execution when a user opens a specially crafted workbook, affecting all major Office product lines from Excel 2016 through Office LTSC 2024 and Microsoft 365 Apps for Enterprise on both Windows and Mac platforms. The vulnerability carries a CVSS 7.8 score reflecting high CIA impact against the Office process, with mandatory user interaction (opening the malicious file) as the sole prerequisite. Microsoft has released patches for all supported versions; no public exploit code or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution across all major Office release tracks when a victim opens a maliciously crafted spreadsheet file. The vulnerability is rooted in improper heap memory management during Excel's file parsing routines (CWE-122), resulting in full compromise of confidentiality, integrity, and availability on the victim system. No public exploit code has been identified at time of analysis, but the breadth of affected versions - spanning Office 2016 through Microsoft 365 and Mac variants - makes this a high-priority patch target for enterprise environments.
Remote code execution in Microsoft Office Word via a heap-based buffer overflow (CWE-122) allows an unauthenticated network attacker to fully compromise a victim system upon opening a crafted document. All major Office licensing tracks are affected on both Windows and macOS, spanning Office 2016 through Microsoft 365 Apps for Enterprise. No CISA KEV listing or public exploit code is referenced in available data, but the low-complexity, no-privileges-required vector with full confidentiality, integrity, and availability impact makes this a critical priority for enterprise patch cycles.
Out-of-bounds write (CWE-787) in multiple Microsoft Office versions enables remote code execution when a victim opens a specially crafted Office document. The vulnerability affects a broad matrix of products spanning Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2016/2019, and their Mac counterparts, covering virtually the entire modern Office product line. Vendor patches have been released via MSRC; no public exploit or CISA KEV listing has been identified at time of analysis, but the network-deliverable, low-complexity nature and full C/I/A impact make this a high-priority patching target.
Out-of-bounds read in Microsoft Office Excel enables remote code execution when a victim opens a crafted Excel workbook, achieving full C/I/A compromise on the target system. The vulnerability spans every major Office product line from Excel 2016 through Microsoft 365 Apps for Enterprise on both Windows and macOS. Vendor-released patches are available for all Windows product lines with specific fixed builds enumerated; no public exploit code or CISA KEV listing has been identified at time of analysis.
Heap-based buffer overflow in Microsoft Word's document-parsing engine, arising from a numeric truncation error, enables remote code execution when a user opens a specially crafted Word document. The flaw spans a wide matrix of Office SKUs on both Windows and Mac - including Office 2016, 2019, LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and Mac variants - and carries CVSS 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), reflecting full compromise with the only friction being the required user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis, but the ubiquity of the Office install base makes this a high-priority patching target.
Heap-based buffer overflow in Microsoft Word (Microsoft 365 Apps for Enterprise, Office 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and the corresponding macOS Office builds) enables arbitrary code execution in the security context of the user who opens an attacker-crafted Word document. The attack is client-side: a victim must open or preview a malicious file delivered by email, web download, or a shared location, and no authentication or elevated privileges on the target are required (PR:N), though our assessment sets the interaction requirement at UI:R despite the UI:N flag in the published vector. No public exploit code has been identified at time of analysis and EPSS is low (0.95%, 59th percentile), but CISA SSVC rates the technical impact as total with automatable exploitation and vendor patches are available, making this a genuinely notable issue rather than an emergency.
Heap-based buffer overflow in Microsoft Office allows unauthenticated remote attackers to execute arbitrary code on a victim's system when the victim opens a specially crafted Office document. Multiple product lines are affected, including Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2016/2019, and Mac variants of each. With a CVSS score of 8.8 and full confidentiality, integrity, and availability impact, this is a high-severity code execution path; no public exploit code or CISA KEV listing has been identified at time of analysis, and a vendor-released patch is available.
Heap-based buffer overflow in Microsoft Office Word's document-parsing engine enables remote code execution when a victim opens a specially crafted file, yielding full confidentiality, integrity, and availability compromise of the user's session. Affected products span Microsoft 365 Apps for Enterprise, Office 2019, Office LTSC 2021, Office LTSC 2024, Word 2016, and corresponding macOS editions across both x86 and x64 architectures. No public exploit identified at time of analysis, but the AV:N/PR:N/UI:R CVSS pattern is historically associated with rapid phishing-campaign weaponization for Office document vulnerabilities.
Heap-based buffer overflow (CWE-122) in Microsoft Office Access enables network-delivered remote code execution across six Microsoft Office product lines. When a victim opens a maliciously crafted Access database file delivered over a network, the overflow corrupts heap memory and allows an attacker to execute arbitrary code with the privileges of the logged-in user. No public exploit code or CISA KEV listing has been identified at time of analysis, and Microsoft has released patched builds for all affected product lines.
Heap-based buffer overflow in Microsoft Office Word enables remote code execution across all currently-supported Office editions when a victim opens a specially crafted document. Affecting Microsoft 365 Apps for Enterprise, Office 2016 through 2024 LTSC on both x86 and x64 platforms, the vulnerability requires no attacker privileges but depends on user interaction - the classic malicious-document delivery model. No public exploit code or CISA KEV listing has been identified at time of analysis, though the CVSS 8.8 rating, full confidentiality/integrity/availability impact, and the near-universal enterprise footprint of Microsoft Office make this a high-priority patching candidate.
Out-of-bounds read in Microsoft Office (2016 through 365 Apps for Enterprise and LTSC 2024) enables an unauthenticated remote attacker to disclose sensitive memory contents over a network, per the provided CVSS vector. Affected products span both perpetual-license and subscription editions across x64 and x86 architectures. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, and Microsoft has released patches across all affected version lines.
Heap-based buffer overflow (CWE-122) in Microsoft Office Word enables unauthenticated remote code execution when a victim opens a specially crafted document. All currently supported Office product lines are affected across Windows (x86/x64) and macOS, including Microsoft 365 Apps for Enterprise, Office 2016, 2019, 2021 LTSC, 2024 LTSC, and Microsoft 365 for Mac. No public exploit code or CISA KEV listing has been identified at time of analysis, but the breadth of affected products and full C/I/A impact make this a high-priority patching item across virtually all enterprise environments.
Heap-based buffer overflow in Microsoft Office Access enables remote code execution when a user opens a specially crafted Access database file. The CVSS 8.8 vector (AV:N/AC:L/PR:N/UI:R) confirms unauthenticated network delivery requiring only a single user interaction - consistent with a malicious file attachment or download attack pattern. No public exploit code or CISA KEV listing has been identified at time of analysis, but the full-triad impact (C:H/I:H/A:H) and broad affected version range spanning Office 2016 through Microsoft 365 Apps make this a high-priority patch-cycle item.
Remote code execution in Microsoft Office exposes unauthenticated network attackers to full system compromise when a target user opens a specially crafted document. The root cause is a heap-based buffer overflow (CWE-122) in Office's document parsing logic, affecting Office 2016 through Microsoft 365 Apps for Enterprise across a defined range of 16.x builds confirmed by EUVD-2026-73711. No public exploit or CISA KEV listing has been identified at time of analysis, but the CVSS 8.8 score with a network attack vector and no required attacker privileges - beyond inducing user file-open interaction - reflects a credible, high-impact threat against the world's most widely deployed office productivity suite.
Heap-based buffer overflow in Microsoft Office enables remote unauthenticated attackers to achieve arbitrary code execution by convincing a target user to open a specially crafted Office document delivered over a network. All major Office perpetual and subscription releases are affected, spanning versions from Office 2016 through Microsoft 365 Apps for Enterprise and LTSC 2024. Vendor-released patches are available via Microsoft Security Response Center; no public exploit code or CISA KEV listing has been identified at time of analysis, though the high-impact, low-complexity CVSS profile warrants prioritized patching in enterprise environments.
External file path control in Microsoft Office Word enables local code execution with full confidentiality, integrity, and availability impact when a target user opens a specially crafted document. All major Office release tracks are affected across Windows and macOS - Office 2016, 2019, 2021 LTSC, LTSC 2024, and Microsoft 365 Apps for Enterprise. No public exploit has been identified at time of analysis, and vendor patches are available through the Office security release channel.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a specially crafted workbook, resulting in full compromise of confidentiality, integrity, and availability on the local system. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) confirms no attacker privileges are required, though user interaction - opening the malicious file - is a hard prerequisite. No public exploit code or CISA KEV listing has been identified at time of analysis; the issue is confirmed by Microsoft's Security Response Center via secure@microsoft.com.
Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a specially crafted Excel file. The attack requires no privileges from the attacker but does require user interaction - consistent with a malicious document delivery vector - and carries high impact across confidentiality, integrity, and availability. No active exploitation (KEV) or public exploit code has been identified in the provided intelligence at time of analysis.
Heap-based buffer overflow in Microsoft Office enables local code execution when a user opens a specially crafted document, affecting multiple product lines including Office 2016 through Microsoft 365 Apps for Enterprise. The vulnerability carries a CVSS 7.8 (High) score and achieves full confidentiality, integrity, and availability compromise on the victim system. No public exploit code has been identified at time of analysis, and Microsoft has released patches via the standard Office Security Releases channel.
Heap-based buffer overflow in Microsoft Office, rooted in an integer underflow during document parsing, enables local code execution with high confidentiality, integrity, and availability impact when a user opens a specially crafted file. All major Office release channels on both Windows and Mac are affected, including Microsoft 365 Apps for Enterprise, Office LTSC 2024/2021/2019/2016, and their Mac equivalents. No public exploit has been identified at time of analysis, but a vendor-released patch is available via the Microsoft Security Response Center.
Local code execution in Microsoft Office stems from an integer overflow that cascades into a heap-based buffer overflow (CWE-122), affecting Office 2016 through LTSC 2024 on both Windows and macOS. An unauthenticated attacker who can convince a target user to open a crafted Office document gains full code execution with the victim's privilege level - achieving high confidentiality, integrity, and availability impact per the CVSS:3.1 AV:L/C:H/I:H/A:H rating. No public exploit code or CISA KEV listing was identified at time of analysis, but the patch is vendor-confirmed and available via Microsoft's Security Update Guide.
Heap-based buffer overflow in Microsoft Office allows local code execution across a wide range of Office versions on both Windows and macOS when a victim opens a specially crafted document. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms that no privileges are required - only that a user interacts with malicious content - making this practically reachable via phishing or drive-by document delivery despite the local attack vector. No active exploitation has been confirmed in CISA KEV, and no public exploit code has been identified at time of analysis; a vendor-released patch is available.
Local code execution in Microsoft Office results from an integer overflow that leads to a heap-based buffer overflow (CWE-122), enabling an attacker to run arbitrary code at the privilege level of the logged-in user. Affected products span multiple Windows and Mac release tracks including Office 2016, 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise. No public exploit or CISA KEV listing is present in the available data; however, the complete high CIA triad and wide deployment footprint make this a priority patching target.
Stack-based buffer overflow in Microsoft Office (CWE-121) enables local code execution across a broad range of affected builds including Office 2016, 2019, LTSC 2021, LTSC 2024, Office 365 for Mac, LTSC for Mac 2021/2024, and Microsoft 365 Apps for Enterprise. Exploitation requires user interaction - consistent with a maliciously crafted document delivery model - and achieves full confidentiality, integrity, and availability compromise within the Office process context. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor-released patch is available via the MSRC advisory.
Out-of-bounds read (CWE-125) in Microsoft Office enables local code execution across a broad range of Office product editions on both Windows and macOS. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms the attack requires no privileges but does require a victim to open a crafted file, consistent with a malicious document delivery scenario. A patch has been released by Microsoft; no public exploit code or CISA KEV listing has been identified at the time of analysis, though the full CIA impact (C:H/I:H/A:H) and breadth of affected products make this a high-priority patching target for enterprise environments.
Heap-based buffer overflow in Microsoft Office enables local code execution with high impact across confidentiality, integrity, and availability. Affecting Office 2016 through 2024, including LTSC and Microsoft 365 variants on both Windows and macOS, the vulnerability is triggered when a user opens a specially crafted document - requiring no privileges but mandatory user interaction (CVSS AV:L/UI:R). Patch is available from Microsoft; no public exploit identified at time of analysis.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-822) that triggers when a user opens a maliciously crafted document. The CVSS 7.8 vector (AV:L/AC:L/PR:N/UI:R) reflects a classic client-side file-format attack requiring user interaction but no prior authentication, yielding full confidentiality, integrity, and availability impact on the targeted workstation. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but Office document parsers are historically high-value targets and the vulnerability was reported by Microsoft's own MSRC team.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-122) that an unauthenticated attacker can trigger when a user opens a crafted document. The CVSS 3.1 base score of 7.8 reflects high impact to confidentiality, integrity, and availability, with required user interaction limiting mass exploitation. There is no public exploit identified at time of analysis and the issue is not currently listed on the CISA KEV catalog.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow that an unauthorized attacker can trigger without user interaction. The flaw carries a CVSS 3.1 score of 8.4 with high impact across confidentiality, integrity, and availability, and no public exploit identified at time of analysis. Despite requiring local access, the absence of authentication and user-interaction requirements makes this a notable priority for endpoint patching cycles.
Local code execution in Microsoft Office via a heap-based buffer overflow allows an unauthorized attacker to run arbitrary code with the privileges of the user opening a malicious document. The CVSS vector (AV:L/PR:N/UI:N) indicates local attack vector without required authentication or user interaction, an unusual combination that warrants verification against the vendor advisory. No public exploit identified at time of analysis and the issue is not currently listed in CISA KEV.
Local code execution in Microsoft Office is possible via a heap-based buffer overflow that an unauthorized attacker can trigger without user interaction, yielding full confidentiality, integrity, and availability impact on the host. The flaw is rated 8.4 (CVSS:3.1) and was disclosed by Microsoft's Security Response Center, but no public exploit has been identified at the time of analysis. Despite the CWE-121 tagging as a stack overflow, the description and CWE-122 class indicate the corruption occurs on the heap, so defenders should treat this as a memory-corruption RCE-class issue requiring prompt patching.
Local code execution in Microsoft Office via a heap-based buffer overflow that lets an unauthorized attacker run arbitrary code in the context of the current user. The flaw carries a CVSS 8.4 rating driven by high impact across confidentiality, integrity, and availability, and no public exploit identified at time of analysis. Despite the 'unauthorized' wording, the CVSS vector specifies a local attack vector, indicating the attacker must already be able to deliver a crafted file or run code on the target system.
Local code execution in Microsoft Office stems from a type confusion (CWE-843) flaw that allows an unauthenticated attacker with local access to run arbitrary code in the context of the Office process. The CVSS 8.4 score reflects high impact on confidentiality, integrity, and availability without requiring privileges or user interaction, though the attack vector is local. No public exploit is identified at time of analysis and the issue is not listed in CISA KEV.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-122) that triggers when a user opens or previews a maliciously crafted document. The CVSS 7.8 score reflects local attack vector with required user interaction, and no public exploit identified at time of analysis. Successful exploitation yields full confidentiality, integrity, and availability impact in the context of the current user.
Local code execution in Microsoft Office is possible when a user opens a maliciously crafted document that triggers a heap-based buffer overflow (CWE-122), allowing the attacker to run arbitrary code in the context of the opened Office process. The CVSS 7.8 (AV:L/AC:L/PR:N/UI:R) reflects a user-interaction-driven local exploit rather than a remote network attack, and no public exploit identified at time of analysis. The flaw was reported through Microsoft Security Response Center (secure@microsoft.com) and is tracked in MSRC's update guide.
Microsoft Outlook Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Out-of-bounds read in Microsoft Office Excel's file parser allows a local attacker to disclose process memory contents when a victim opens a specially crafted Excel document. Affected across all major release channels including Excel 2016, Office 2019, LTSC 2021, LTSC 2024, Microsoft 365 Apps for Enterprise, and Mac variants. No public exploit has been identified at time of analysis, and SSVC classifies exploitation as none with non-automatable delivery.
Uninitialized resource use (CWE-908) in Microsoft Excel allows a local attacker to disclose process memory contents when a user opens a specially crafted workbook. Affected products span Excel 2016 through Microsoft 365 Apps for Enterprise on both Windows and macOS, with vendor patches released across all Windows builds. No public exploit has been identified and SSVC rates exploitation as none with partial technical impact, placing real-world risk firmly in the moderate range despite the C:H CVSS metric.
Type confusion (CWE-843) in Microsoft Office Excel enables local information disclosure when a victim opens a specially crafted Excel file. Affected products span Excel 2016, Office 2019, Office LTSC 2021/2024, Microsoft 365 Apps for Enterprise, Office Online Server, and multiple Mac Office variants. The vulnerability carries a CVSS 5.5 with High confidentiality impact but no integrity or availability impact; no public exploit or active exploitation has been identified at time of analysis.
Out-of-bounds memory read in Microsoft Excel exposes potentially sensitive in-process memory contents when a user opens a specially crafted workbook. Affects a wide range of Office versions including Microsoft 365 Apps for Enterprise, Office 2016 through LTSC 2024, and Office for Mac editions. SSVC assessment rates exploitation as none with non-automatable attack delivery, and Microsoft has released patches addressing all affected branches. No public exploit or CISA KEV listing exists at time of analysis.
Buffer over-read (CWE-126) in Microsoft Office Excel allows a local attacker to disclose potentially sensitive process memory when a user opens a crafted Excel workbook. The flaw spans a broad range of Office versions from 2016 through LTSC 2024, including Microsoft 365 Apps for Enterprise and Mac variants, making the affected footprint very large. No public exploit code or CISA KEV listing has been identified; exploitation depends on social engineering to deliver a malicious file to the local system.
Out-of-bounds read in Microsoft Excel allows a local, unauthenticated attacker to disclose potentially sensitive memory contents by convincing a user to open a specially crafted workbook. Affected builds span Excel 2016 through Microsoft 365 Apps for Enterprise on both Windows and macOS. No public exploit code exists and CISA SSVC rates exploitation as 'none' with partial technical impact, making this a moderate-priority patch-cycle item rather than an urgent emergency.
Sensitive system information disclosure in Microsoft Excel allows a local, unauthenticated attacker to read high-confidentiality data when a victim opens a specially crafted spreadsheet. Affecting Office 2016 through LTSC 2024 on both Windows and Mac, the flaw (CWE-497) exposes internal system data - such as memory layout, environment variables, or path information - to an unauthorized control sphere during file parsing. No public exploit has been identified at time of analysis, and Microsoft has released patches across all affected product lines.
Out-of-bounds read in Microsoft Excel discloses sensitive memory contents when a victim opens a specially crafted Excel file. The vulnerability spans a wide range of affected versions including Excel 2016, Office 2019, LTSC 2021/2024, Office 365 for Mac, and Microsoft 365 Apps for Enterprise, making the patch surface broad across enterprise environments. No public exploit or active exploitation has been identified at time of analysis; vendor patch is available via MSRC.
Out-of-bounds read in Microsoft Excel across Office 2016 through 365 Apps for Enterprise permits a local, unauthenticated attacker to disclose sensitive memory contents when a victim opens a specially crafted spreadsheet file. The vulnerability carries a CVSS 5.5 score reflecting the local delivery requirement and confidentiality-only impact, with no integrity or availability consequences. No public exploit code or active exploitation has been identified at time of analysis, and vendor patches are available for all major Windows Office editions.
Uninitialized memory disclosure in Microsoft Excel exposes potentially sensitive heap or stack contents when a victim opens a crafted document, allowing an unauthenticated attacker to read process memory with high confidentiality impact. Affected product lines span Excel 2016 through Microsoft 365 Apps for Enterprise and multiple Mac variants, making this a broad-surface vulnerability. No public exploit code and no CISA KEV listing have been identified at time of analysis; SSVC assessment rates exploitation as 'none' with non-automatable delivery, limiting realistic risk to targeted document-delivery campaigns.
Out-of-bounds read in Microsoft Office Excel's file parser allows local information disclosure when a victim opens a specially crafted workbook. Affecting Excel 2016 through Microsoft 365 Apps for Enterprise, Office LTSC 2024, Office Online Server, and multiple macOS Office variants, the vulnerability (CWE-125) exposes process memory with high confidentiality impact but no integrity or availability consequences. Microsoft has released patched builds via MSRC; SSVC confirms no active exploitation and non-automatable delivery, placing this squarely within standard monthly patch-cycle priority.
Microsoft Office Excel exposes sensitive system information to an unauthorized control sphere (CWE-497), enabling local information disclosure when a victim opens a specially crafted Excel file. The vulnerability spans Excel 2016 through Microsoft 365 Apps for Enterprise and multiple LTSC editions on both Windows and Mac. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, though the C:H CVSS confidentiality rating indicates the quality or quantity of information that can be exfiltrated is significant.
Uninitialized resource use (CWE-908) in Microsoft Office exposes high-confidentiality data to remote unauthenticated attackers when a victim opens a specially crafted Office document. The vulnerability spans the full Microsoft Office ecosystem - Office 2016, 2019, LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and Mac variants - making the affected surface extremely broad. No public exploit code and no active exploitation have been identified at time of analysis; Microsoft has released patches across all affected product lines.
Out-of-bounds read in Microsoft Office (CWE-125) allows a remote unauthenticated attacker to disclose sensitive memory contents when a victim opens a specially crafted document. Affected products span Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2016/2019, and their Mac counterparts - covering virtually the entire active Office install base. No public exploit code or active exploitation has been identified; SSVC rates the exploitation likelihood as none and technical impact as partial, consistent with the 6.5 CVSS base score.
Out-of-bounds read in Microsoft Word across Office 2016 through Microsoft 365 Apps enables an unauthenticated remote attacker to disclose sensitive memory contents when a user opens a crafted document. The vulnerability (CWE-125) affects both Windows (x86/x64) and macOS deployments of the Office suite across multiple release tracks - retail, LTSC, and subscription. No public exploit or active exploitation has been identified at time of analysis, though the broad install base and socially-engineered document delivery make this a realistic phishing vector.
Heap-based buffer overflow in Microsoft Office leaks sensitive memory contents to unauthenticated network attackers when a victim opens a specially crafted document. Affected products span Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise on both Windows and macOS, making the exposure surface extremely broad. Vendor-released patches are available; no public exploit or CISA KEV listing has been identified at time of analysis, but the low-complexity, no-privilege vector warrants prompt patching across enterprise fleets.
Out-of-bounds read (CWE-125) in Microsoft Office Outlook allows a remote unauthenticated attacker to leak process memory contents when a victim opens or previews a crafted email message or attachment. All major Office branches are affected - Office 2016, 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise - spanning hundreds of millions of endpoints globally. Microsoft has released patches across all affected branches; no public exploit code exists and CISA SSVC rates exploitation as 'none' at the time of analysis.
Out-of-bounds read in Microsoft Excel enables an unauthenticated remote attacker to disclose sensitive memory contents when a victim opens a crafted Excel file. The vulnerability spans a broad range of Office product lines - including Office 2016, 2019, 2021 LTSC, 2024 LTSC, Microsoft 365 Apps for Enterprise, and Mac variants - making the exposure surface wide. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; a vendor patch is available via Microsoft's update guide.
Buffer over-read (CWE-126) in Microsoft Office Excel's file parsing engine allows remote information disclosure when a user opens a crafted spreadsheet file. Affected versions span Office 2016 through Office 2024 LTSC and Microsoft 365 Apps for Enterprise across Windows and Mac platforms, with fixed builds confirmed for Windows variants per EUVD-2026-73733. No public exploit code has been identified at time of analysis, and SSVC rates current exploitation as none with partial technical impact, consistent with the absence of a CISA KEV listing.
Integer overflow in Microsoft Office Word's document parsing engine triggers an out-of-bounds read (CWE-125), enabling a remote unauthenticated attacker to disclose potentially sensitive memory contents by inducing a victim to open a specially crafted document. Affected products span Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise on both Windows and macOS. Microsoft has released patches across all affected versions; no confirmed active exploitation or public exploit code has been identified at time of analysis.
Buffer over-read (CWE-126) in Microsoft Office exposes process memory contents to remote unauthenticated attackers when a victim opens a maliciously crafted Office document. The vulnerability spans a wide range of Office product lines across both Windows and macOS - including Office 2016, 2019, LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and the macOS Office 365/LTSC equivalents. No public exploit code has been identified and the CVE does not appear in the CISA KEV catalog at time of analysis; a vendor patch has been released across all affected product lines.
Insufficiently protected credential transmission in Microsoft Office exposes NTLM or equivalent credential material to a network-adjacent attacker via a crafted document or resource link. Affected versions span the entire active Office portfolio - Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise - making the exposure broadly relevant. An unauthenticated remote attacker who can induce a user to open a specially crafted Office file or embedded resource can capture credential hashes suitable for relay or offline cracking, constituting a practical spoofing primitive. No public exploit code or CISA KEV listing has been identified at the time of analysis, though Microsoft has released patches.
Uninitialized memory disclosure in Microsoft Office exposes sensitive process memory to local attackers who can deliver a crafted document. Affecting a broad range of Office versions across Windows and macOS - including Microsoft 365 Apps for Enterprise, Office 2016 through LTSC 2024, and Office 365 for Mac - the flaw yields high confidentiality impact with no integrity or availability loss. No public exploit code or CISA KEV listing has been identified at time of analysis; Microsoft has issued patches via the August 2026 update cycle.
Information disclosure in Microsoft Excel arises from use of uninitialized memory (CWE-908), exposing potentially sensitive heap or stack contents to an attacker when a victim opens a maliciously crafted Excel file. Affected products span the full Microsoft Office portfolio on both Windows and macOS, including Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2019, Excel 2016, and their Mac counterparts. No public exploit identified at time of analysis; vendor-released patches are available via the Microsoft Security Response Center.
Out-of-bounds read in Microsoft Excel enables local information disclosure when a user opens a specially crafted spreadsheet. Multiple product lines are affected across Windows and macOS, spanning Excel 2016, Office 2019, LTSC 2021, LTSC 2024, Office 365 for Mac, and Microsoft 365 Apps for Enterprise. Microsoft has released patches; no public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Out-of-bounds memory read in Microsoft Office exposes potentially sensitive process memory contents when a victim opens a specially crafted document locally. The vulnerability affects the full Office suite across Windows and macOS - spanning Office 2016 through LTSC 2024, Office 365 for Mac, and Microsoft 365 Apps for Enterprise - with High confidentiality impact per CVSS but no integrity or availability consequence. No public exploit has been identified at time of analysis; CISA SSVC classifies exploitation status as none and the attack is not automatable, significantly reducing real-world prioritization urgency despite the High C rating.
Out-of-bounds read (CWE-125) in Microsoft Office enables a local, unauthenticated attacker to disclose sensitive memory contents by convincing a user to open a specially crafted Office document. Affected products span the full modern Office portfolio - Office 2016 through Office LTSC 2024 and Microsoft 365 Apps for Enterprise. No public exploit code has been identified at time of analysis, and CISA SSVC rates exploitation as 'none' with non-automatable delivery, placing this in a lower operational urgency tier despite the High confidentiality impact rating.
Out-of-bounds read (CWE-125) in Microsoft Office exposes sensitive memory contents to local attackers who can persuade a user to open a specially crafted document. Affected products span multiple Office generations including Office 2016, 2019, 2021, 2024, LTSC variants, and Microsoft 365 Apps for Enterprise on both Windows and macOS. No public exploit has been identified at time of analysis, and CISA SSVC rates exploitation status as none with non-automatable delivery, aligning with the local, user-interaction-dependent CVSS vector.
Out-of-bounds read in Microsoft Office exposes sensitive in-process memory contents to local attackers who socially engineer a victim into opening a crafted document. The flaw spans the full Microsoft Office portfolio across Windows and macOS - from Office 2016 through Microsoft 365 Apps for Enterprise - making it broadly relevant for enterprise patch management. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis; vendor patch is confirmed available.
Out-of-bounds read in Microsoft Office and SharePoint Server exposes low-level memory contents to a local attacker when a victim opens a crafted document. Affected products span Microsoft 365 Apps for Enterprise, Office 2016/2019/LTSC 2021/2024, Office for Mac variants, and SharePoint Server 2016/2019/Subscription Edition - all at version 16.0.x baselines. The CVSS score of 3.3 (Low) reflects constrained impact: confidentiality is only partially affected, integrity and availability are untouched, and exploitation requires both local access and user interaction. No public exploit identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Out-of-bounds read in Microsoft Office triggers local information disclosure when a victim opens a crafted document, exposing adjacent memory contents with high confidentiality impact. The vulnerability spans a wide product surface including Office 2016 through LTSC 2024, Microsoft 365 Apps for Enterprise, multiple SharePoint Server versions, and Mac variants, as confirmed by EUVD-2026-35664. No public exploit or CISA KEV listing is identified at time of analysis; vendor-released patches are available across affected product lines.