Office 2019

Remote code execution in Microsoft Office Outlook stems from an integer overflow or wraparound condition (CWE-190) that allows an unauthenticated network attacker to execute arbitrary code on a victim's system, achieving full confidentiality, integrity, and availability compromise. The CVSS 3.1 score of 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R reflects low attack complexity and no authentication requirement, though exploitation is gated by a user interaction step. No public exploit code and no CISA KEV listing have been identified at time of analysis, but the attack profile is consistent with phishing-delivered malicious email or attachment campaigns targeting Outlook users.

Out-of-bounds read in Microsoft Office Excel enables remote information disclosure when a user opens a specially crafted spreadsheet. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) confirms that an unauthenticated network-based attacker can trigger the flaw, but only after social engineering a victim into opening a malicious file. No public exploit code and no CISA KEV listing have been identified at time of analysis; Microsoft has released patches across all affected Office product lines.

Out-of-bounds read in Microsoft Excel exposes sensitive memory contents over a network to unauthenticated remote attackers, resulting in high-confidence information disclosure (C:H). Exploitation requires user interaction - specifically, opening a crafted Excel document - placing this firmly in the phishing/malicious-attachment delivery class. No active exploitation has been confirmed (not listed in CISA KEV), and no public exploit code has been identified at the time of analysis, though the patch is available and should be applied promptly given the ubiquity of the affected product across enterprise environments.

Information disclosure in Microsoft Office PowerPoint enables a local attacker to obtain sensitive data from a victim's system by exploiting improper input validation (CWE-20) when processing a malicious file. Affected products span Windows and Mac editions including Office 2019, Microsoft 365 Apps for Enterprise, LTSC 2021/2024, and Office 365 for Mac - all requiring the victim to open a crafted PowerPoint file (UI:R). No active exploitation has been confirmed by CISA KEV, and no public exploit code has been identified at time of analysis; however, a vendor patch is available.

Information disclosure in Microsoft Office (spanning 365 Apps for Enterprise, LTSC 2021/2024, Office 2019, and macOS variants) is triggered locally when a user opens a specially crafted document, exploiting improper input validation (CWE-20) to expose sensitive information with high confidentiality impact. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, score 5.5) confirms local-only exploitation requiring user interaction, substantially limiting opportunistic mass exploitation. No public exploit has been identified at time of analysis, and Microsoft has released a patch across all affected product lines.

Local information disclosure in Microsoft PowerPoint stems from improper input validation (CWE-20) when processing specially crafted presentation files, affecting a broad range of Office product lines on both Windows and macOS. The CVSS vector (AV:L/UI:R/C:H) confirms that while no special system privileges are required, a victim must open a malicious file, making social engineering the primary delivery mechanism. No public exploit has been identified and no active exploitation is confirmed, but the high confidentiality impact (C:H) warrants prompt patching given the ubiquitous deployment of Microsoft Office.

Information disclosure in Microsoft Office PowerPoint stems from improper input validation (CWE-20) that allows a locally-present attacker to read sensitive data from the vulnerable system when a user opens a crafted file. Affected products span PowerPoint across Office 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise on both Windows and macOS. No public exploit code or active exploitation has been identified at the time of analysis; a vendor patch is available via standard Office update channels.

Microsoft Office Word's document parsing logic fails to properly validate input (CWE-20), enabling a local attacker to read sensitive information from a target system when a victim opens a specially crafted Word document. The flaw affects a broad range of Microsoft Office releases on both Windows and macOS, including Microsoft 365 Apps for Enterprise, Office 2019, and all LTSC variants through 2024. SSVC assessment confirms no current exploitation activity and the attack is not automatable due to required user interaction, though the CVSS confidentiality impact is rated High.

Improper input validation in Microsoft Office Excel enables a local attacker to disclose sensitive information when a target user opens a specially crafted file. The vulnerability affects a broad swath of Microsoft Office product lines - including Microsoft 365 Apps for Enterprise, Office LTSC 2021 and 2024, Office 2019, Office 365 for Mac, and Word 2016 - across both Windows and macOS platforms. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog; vendor-released patches are available across all affected product lines.

Uninitialized memory disclosure in Microsoft Office exposes sensitive process memory to local attackers who can deliver a crafted document. Affecting a broad range of Office versions across Windows and macOS - including Microsoft 365 Apps for Enterprise, Office 2016 through LTSC 2024, and Office 365 for Mac - the flaw yields high confidentiality impact with no integrity or availability loss. No public exploit code or CISA KEV listing has been identified at time of analysis; Microsoft has issued patches via the August 2026 update cycle.

Improper input validation in Microsoft Office PowerPoint enables local information disclosure when a victim opens a specially crafted presentation file. The vulnerability spans Microsoft 365 Apps for Enterprise, Office LTSC 2021 and 2024, Office 2019, and their macOS counterparts across both subscription and perpetual-license release tracks. Microsoft has released patches via the standard Office update channel; no public exploit has been identified at time of analysis.

Out-of-bounds read in Microsoft Office (Windows and macOS editions, including LTSC 2024, LTSC 2021, 2019, and 365 Apps) enables local information disclosure when a user opens a maliciously crafted document. The CVSS vector (AV:L/UI:R) confirms exploitation is constrained to local, user-triggered scenarios with no code execution or data modification capability. Microsoft has released patches across all affected product lines; no public exploit code or CISA KEV listing exists at time of analysis.

Local information disclosure in Microsoft Office stems from improper input validation (CWE-20), allowing a local attacker who can induce user interaction to read sensitive data from the affected system. Affected products span Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2019, and Office 365/LTSC for Mac, with Mac builds patched at 16.112.26081010 and Windows builds addressed via the Microsoft Office Security Releases channel. No public exploit has been identified at time of analysis, and SSVC rates exploitation as none with non-automatable attack path.

PowerPoint's improper input validation (CWE-20) exposes local users to high-impact compromise when a maliciously crafted presentation file is opened, with the official CVSS vector asserting high confidentiality, integrity, and availability impact - a notable divergence from the description's characterization as information disclosure only. The attack requires no attacker privileges but mandates user interaction, fitting a phishing-and-open-file threat model. No public exploit code exists and this vulnerability is not listed in the CISA KEV catalog at time of analysis.

Local information disclosure in Microsoft Office PowerPoint exposes sensitive data when a user opens a crafted file. The flaw, rooted in improper input validation (CWE-20), affects a broad range of Office versions across Windows and macOS including Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, and Office 2019. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog; Microsoft has released patches via its August 2026 update cycle.

Use-after-free memory corruption in Microsoft Office Word enables local code execution when a user opens a specially crafted document. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms this is a social-engineering-dependent attack - no system privileges are required, but the victim must open a malicious file, making phishing or drive-by document delivery the likely delivery mechanism. All three impact dimensions (Confidentiality, Integrity, Availability) are rated High, yielding a 7.8 CVSS score; no public exploit or CISA KEV listing has been identified at time of analysis.

Out-of-bounds read in Microsoft Office Word exposes sensitive memory contents to local attackers via crafted document files. Affected products span Word 2016 through Microsoft 365 Apps for Enterprise on both Windows and Mac platforms, covering a broad enterprise install base. Exploitation requires user interaction - a victim must open a malicious document - but yields high confidentiality impact with no integrity or availability loss. No public exploit has been identified at time of analysis.

Heap-based buffer overflow in Microsoft Office (365 Apps for Enterprise, Office 2019, Office 2021 LTSC, and Office 2024 LTSC) enables a local attacker with low-privilege credentials to execute arbitrary code with the full confidentiality, integrity, and availability impact of the Office process. The vulnerability (CWE-122) carries a CVSS 3.1 score of 7.8 and requires only local access and a standard user account - no user interaction is needed once the attacker can trigger the vulnerable allocation path. No public exploit code has been identified at time of analysis, and SSVC assessment confirms current exploitation status as none.

Stack-based buffer overflow in Microsoft Office Excel enables local arbitrary code execution when a user opens a specially crafted file. The vulnerability (CWE-121) carries a CVSS 7.8 High score, with high confidentiality, integrity, and availability impact upon successful exploitation. No active exploitation has been confirmed (not listed in CISA KEV), and no public exploit code is identified at time of analysis.

Stack-based buffer overflow in Microsoft Office Excel enables local code execution when a user opens a crafted file. The vulnerability (CWE-121) is triggered through user interaction with malicious content, requiring no privileges on the target system beyond access to run Excel. No public exploit code or CISA KEV listing is identified at time of analysis, though the high-impact CVSS 7.8 score reflects full compromise of confidentiality, integrity, and availability upon successful exploitation.

Heap-based buffer overflow in Microsoft Office Excel enables local code execution with full system-level impact when a victim opens a specially crafted Excel file. The flaw (CWE-122) resides in Excel's file parsing logic, where malformed input causes a heap memory region to be overwritten, redirecting execution flow. No public exploit has been identified at time of analysis, and the vulnerability has not appeared in CISA's Known Exploited Vulnerabilities catalog, though the Microsoft Security Response Center has issued an advisory.

Out-of-bounds read in Microsoft Office Excel enables local code execution when a user opens a specially crafted spreadsheet file. The vulnerability (CWE-125) carries a CVSS 7.8 score with high impact across confidentiality, integrity, and availability, and is reported directly by Microsoft via the MSRC update guide. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity (AC:L) indicates reliable exploitability once a working exploit is developed.

Out-of-bounds read in Microsoft Office Excel exposes high-confidentiality memory contents to a local, unauthenticated attacker who can induce a victim to open a crafted spreadsheet file. The flaw affects a wide range of Office versions across both Windows and macOS platforms, including Office 2019, 2021, 2024 LTSC, and Microsoft 365 Apps for Enterprise. No public exploit or active exploitation has been identified at time of analysis; SSVC assessment rates exploitation as none and the attack as non-automatable, indicating moderate real-world urgency despite the High confidentiality impact rating.

Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a user opens a specially crafted Excel file. The vulnerability triggers during file parsing, allowing an attacker who can deliver a malicious document to execute arbitrary code with the privileges of the logged-in user. No KEV listing or public exploit code has been identified at time of analysis, but the local-execution-via-document vector makes this a meaningful phishing and spear-phishing enabler.

Type confusion (CWE-843) in Microsoft Office Excel enables local code execution when a victim opens a specially crafted file. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms the attack is file-based: no attacker privileges are required, but the target user must open a malicious document, making this a high-impact phishing-delivery vector. No public exploit code and no CISA KEV listing are identified at time of analysis, but the full confidentiality, integrity, and availability impact (C:H/I:H/A:H) makes this a critical priority for organizations where Excel is deployed.

Untrusted pointer dereference in Microsoft Office Excel enables local arbitrary code execution when a user opens a crafted document. The flaw (CWE-822) allows an attacker who can deliver a malicious file to achieve full code execution with high confidentiality, integrity, and availability impact on the victim's system. No public exploit has been identified at time of analysis, and Microsoft has not listed this in CISA's Known Exploited Vulnerabilities catalog.

Incomplete resource cleanup in Microsoft Office PowerPoint exposes sensitive document data to local attackers across multiple supported product lines, including Microsoft 365 Apps for Enterprise, Office LTSC 2024, LTSC 2021, Office 2019, and PowerPoint 2016. Exploitation requires a victim to open or interact with a PowerPoint file (UI:R), after which residual data - likely temporary files, memory buffers, or cached presentation content - persists in a locally accessible state without requiring attacker privileges. No public exploit code has been identified at time of analysis and there is no CISA KEV listing, keeping real-world risk moderate despite the high confidentiality impact rating.

Out-of-bounds read in Microsoft Excel exposes process memory to local information disclosure across a wide range of Office versions, from Excel 2016 through Microsoft 365 Apps for Enterprise and multiple LTSC releases on both Windows and macOS. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) confirms exploitation requires the victim to open a specially crafted spreadsheet file, making phishing-delivered documents the realistic delivery mechanism. No public exploit code or CISA KEV listing has been identified at time of analysis, and Microsoft has released patches across all affected product lines.

Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a user opens a specially crafted file, granting full confidentiality, integrity, and availability compromise of the affected system. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms this is a document-triggered exploit requiring no attacker privileges but demanding victim interaction - a profile consistent with malicious email attachment or drive-by download campaigns. No public exploit code or CISA KEV listing has been identified at time of analysis, though Excel's ubiquity makes this a high-value target class.

Out-of-bounds write (CWE-787) in Microsoft Office Excel enables local code execution when a user opens a specially crafted Excel file, yielding full confidentiality, integrity, and availability impact at CVSS 7.8. The attack is file-delivery based - typical phishing or drive-by download - requiring no system privileges from the attacker but requiring the victim to open the malicious document. No public exploit code or CISA KEV listing has been identified at time of analysis.

Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a user opens a specially crafted Excel file. The CVSS vector (AV:L/PR:N/UI:R) confirms the attack requires no system privileges but does require user interaction - the classic malicious-document delivery pattern. Full confidentiality, integrity, and availability compromise results, making this a high-severity threat against any organization reliant on Excel for document workflows. No public exploit or CISA KEV listing has been identified at time of analysis.

Heap-based buffer overflow in Microsoft Office Excel enables local code execution with full system impact when a victim opens a maliciously crafted workbook. The root cause is a numeric truncation error (CWE-122) in Excel's file parsing logic, where an integer value is truncated before being used to size a heap allocation, resulting in an undersized buffer that can be overflowed. No public exploit code has been identified at time of analysis, and there is no CISA KEV listing, but the high CVSS score of 7.8 and full confidentiality, integrity, and availability impact make this a meaningful risk for organizations relying on Excel file workflows.

Type confusion (CWE-843) in Microsoft Office Excel enables local code execution by an unauthenticated attacker when a victim opens a specially crafted Excel document. The CVSS:3.1 vector (AV:L/AC:L/PR:N/UI:R) confirms this is a file-borne attack requiring user interaction but no attacker privileges, with full High/High/High C/I/A impact. No public exploit code or CISA KEV listing has been identified at time of analysis, though the memory corruption tag suggests the type confusion leads to exploitable heap or stack corruption.

Out-of-bounds read (CWE-125) in Microsoft Excel triggers information disclosure when a victim opens a specially crafted spreadsheet file, exposing potentially sensitive memory contents to a local attacker. The flaw spans multiple Office product lines - Excel 2016, Office 2019, Office LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and corresponding Mac variants - with high confidentiality impact but no integrity or availability consequences. No public exploit has been identified and SSVC confirms no known exploitation; a vendor patch is available via the Microsoft Security Response Center.

Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a specially crafted workbook, resulting in full compromise of confidentiality, integrity, and availability on the local system. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) confirms no attacker privileges are required, though user interaction - opening the malicious file - is a hard prerequisite. No public exploit code or CISA KEV listing has been identified at time of analysis; the issue is confirmed by Microsoft's Security Response Center via secure@microsoft.com.

Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a specially crafted Excel file. The attack requires no privileges from the attacker but does require user interaction - consistent with a malicious document delivery vector - and carries high impact across confidentiality, integrity, and availability. No active exploitation (KEV) or public exploit code has been identified in the provided intelligence at time of analysis.

Information disclosure in Microsoft Excel arises from use of uninitialized memory (CWE-908), exposing potentially sensitive heap or stack contents to an attacker when a victim opens a maliciously crafted Excel file. Affected products span the full Microsoft Office portfolio on both Windows and macOS, including Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2019, Excel 2016, and their Mac counterparts. No public exploit identified at time of analysis; vendor-released patches are available via the Microsoft Security Response Center.

Out-of-bounds read in Microsoft Excel enables local information disclosure when a user opens a specially crafted spreadsheet. Multiple product lines are affected across Windows and macOS, spanning Excel 2016, Office 2019, LTSC 2021, LTSC 2024, Office 365 for Mac, and Microsoft 365 Apps for Enterprise. Microsoft has released patches; no public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.

Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a user opens a specially crafted Excel file. An unauthenticated attacker (per CVSS PR:N) delivers a malicious document that triggers the overflow upon interaction (UI:R), achieving full confidentiality, integrity, and availability compromise on the victim system. No public exploit or KEV listing has been identified at time of analysis, though the attack pattern is well-understood and document-based Excel exploits have a long operational history.

Stack-based buffer overflow in Microsoft Office Excel enables arbitrary code execution on the victim's local machine when a specially crafted Excel file is opened. The vulnerability carries a CVSS base score of 7.8 with high confidentiality, integrity, and availability impact, affecting the victim's user-level security context. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, reducing immediacy compared to actively exploited file-format parsing flaws.

Heap-based buffer overflow in Microsoft Office Excel enables local code execution when a victim opens a maliciously crafted file. The vulnerability (CWE-122) corrupts heap memory in Excel's parsing logic, allowing an attacker to achieve full control over confidentiality, integrity, and availability of the affected system. No public exploit or active exploitation has been identified at time of analysis, but the CVSS score of 7.8 with high impact across all three CIA triad pillars makes this a meaningful priority for organizations running affected Excel versions.

Out-of-bounds read in Microsoft Office Excel enables local code execution when a user opens a specially crafted workbook file. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms file-based delivery requiring victim interaction, achieving full confidentiality, integrity, and availability impact on the compromised host. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.

Local privilege escalation in Microsoft Office exploits a command injection flaw (CWE-77) that allows an authenticated local attacker to gain elevated privileges on the affected system. The vulnerability requires only low-level privileges to trigger, making it accessible to any standard user account on a compromised or shared system. No public exploit code or CISA KEV listing is identified at time of analysis, but the high-impact CVSS score and Microsoft's own disclosure warrant prompt patching.

Heap-based buffer overflow in Microsoft Office Word enables a local, unauthenticated attacker to disclose sensitive memory contents by enticing a user to open a maliciously crafted document. Affected products span Microsoft Word 2016, Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024 on Windows, and Office LTSC/365 on macOS. No public exploit code has been identified at time of analysis, SSVC rates exploitation as none, and Microsoft has released patches via the standard Office update channel.

Out-of-bounds read in Microsoft Office exposes memory contents to local information disclosure across a wide range of affected products including Word 2016, Office 2019, LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and Office 365/LTSC for Mac. The CVSS vector (AV:L/UI:R/C:H) indicates exploitation requires a victim to open a specially crafted Office document, after which sensitive in-process memory can be disclosed to the attacker. No public exploit has been identified at time of analysis, no KEV listing exists, and Microsoft has released patches across all affected product lines.

Stack-based buffer overflow in Microsoft Office enables local arbitrary code execution when a user opens a specially crafted document. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms exploitation is local and requires user interaction - most likely triggered by opening a maliciously crafted Office file delivered via phishing or other social engineering. No active exploitation has been confirmed (not listed in CISA KEV) and no public exploit code has been identified at time of analysis, though the high-impact triad (C:H/I:H/A:H) and Microsoft Office's ubiquitous deployment footprint make this a notable patching priority.

Information disclosure in Microsoft Word via an off-by-one out-of-bounds read (CWE-125) exposes high-confidentiality data to a local attacker when a user opens a crafted document. Affected products span Microsoft Word 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise. No active exploitation is confirmed in CISA KEV and no public exploit code has been identified at time of analysis, but the high confidentiality impact and wide deployment footprint make patching a clear priority.

Type confusion in Microsoft Office Excel's file-processing engine enables remote code execution when a user opens a specially crafted spreadsheet document. The vulnerability carries a CVSS 8.8 High score with full confidentiality, integrity, and availability impact against the Excel process, requiring only user interaction to trigger - the classic phishing-attachment threat model. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis.

Heap-based buffer overflow in Microsoft Office enables arbitrary local code execution when a user opens a specially crafted document. Affected products span seven product lines across Windows and macOS, including Office 2019, Office LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and their Mac counterparts, all prior to the vendor-released patch. No public exploit or CISA KEV listing has been identified at time of analysis, but the breadth of the affected install base and the low-complexity exploitation path make this a high-priority patching item.

Heap-based buffer overflow in Microsoft Office enables local code execution when a user opens a specially crafted document, affecting multiple product lines including Office 2016 through Microsoft 365 Apps for Enterprise. The vulnerability carries a CVSS 7.8 (High) score and achieves full confidentiality, integrity, and availability compromise on the victim system. No public exploit code has been identified at time of analysis, and Microsoft has released patches via the standard Office Security Releases channel.

Use-after-free memory corruption in Microsoft Office enables an attacker to execute arbitrary code in the context of the victim user, scoring CVSS 7.8 (High). Affected products span Office 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise on both Windows and macOS. Exploitation requires a victim to open a specially crafted Office document - a delivery mechanism trivially achieved via phishing - and no public exploit code or CISA KEV listing has been identified at time of analysis, though Microsoft Office's ubiquitous enterprise footprint and adversary interest in document-borne malware elevate this beyond a theoretical risk.

Command injection in Microsoft Office enables local arbitrary code execution with high impact across confidentiality, integrity, and availability, affecting Microsoft 365 Apps for Enterprise, Office 2019, LTSC 2021, and LTSC 2024. Exploitation requires a victim to open a specially crafted Office document, after which unsanitized input reaches a command processor without requiring any attacker-side privileges on the target system. No public exploit has been identified at time of analysis, and the vulnerability does not appear in the CISA KEV catalog as of the available intelligence.

Heap-based buffer overflow in Microsoft Office Access enables local code execution across Office 2016, 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise when a victim opens a specially crafted database file. The flaw, rooted in CWE-122, yields full High/High/High impact on confidentiality, integrity, and availability (CVSS 7.8), making successful exploitation equivalent to arbitrary code execution in the user's security context. No public exploit code and no CISA KEV listing have been identified at time of analysis; Microsoft has released patches via the Office Security Releases channel.

Stack-based buffer overflow in Microsoft Office Access enables a local unauthenticated attacker to achieve arbitrary code execution when a victim opens a specially crafted Access database file. Affected products span Microsoft Access 2016 (32-bit and 64-bit), Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise. No public exploit has been identified at time of analysis, and a vendor-released patch is available through the Microsoft Security Response Center.

Out-of-bounds read in Microsoft Word's document parsing engine exposes sensitive in-process memory to a local attacker across Office 2016 through LTSC 2024 and macOS variants. Exploitation requires a victim to open a specially crafted document, making social engineering or phishing the primary delivery mechanism. No public exploit code exists and no active exploitation has been identified (not in CISA KEV); SSVC assessment rates exploitation status as none and technical impact as only partial.

Heap-based buffer overflow in Microsoft Office Word enables local code execution with High confidentiality, integrity, and availability impact when a user opens a specially crafted document. Affects Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Office LTSC 2021 and 2024, Word 2016, and corresponding Mac editions. No public exploit identified at time of analysis and the vulnerability is not listed in CISA KEV, but the broad product footprint and low attack complexity make patch application a near-term priority for enterprise defenders.

Heap-based buffer overflow (CWE-122) in Microsoft Office Access enables local code execution when a user opens a specially crafted database file, with full high-impact compromise of confidentiality, integrity, and availability (CVSS 7.8). Affected products span Microsoft Access 2016 through Microsoft 365 Apps for Enterprise and Office LTSC 2024. No public exploit or CISA KEV listing has been identified at time of analysis; a vendor patch is available via the Microsoft Security Response Center.

Stack-based buffer overflow in Microsoft Office Access enables local code execution with high impact across confidentiality, integrity, and availability. Affected products span Microsoft Access 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise - all at version 16.0.x or 19.0.x prior to the patched releases. An attacker who can deliver a malicious Access file and induce a local user to open it can achieve arbitrary code execution in the context of that user. No public exploit has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog.

Local code execution via heap-based buffer overflow in Microsoft Office affects multiple product lines including Office 2019, 2021, 2024 LTSC, and Microsoft 365 Apps for Enterprise. An integer overflow or wraparound during document parsing leads to an undersized heap allocation (CWE-122), enabling arbitrary code execution at the privilege level of the opening user when a victim opens a maliciously crafted Office file. No public exploit code has been identified at time of analysis, and no CISA KEV listing is present, though the full-triad high-impact CVSS score of 7.8 reflects the severity of successful exploitation.

Local code execution via untrusted pointer dereference in Microsoft Office affects multiple product lines - Microsoft 365 Apps for Enterprise, Office 2019, Office LTSC 2021/2024, and Mac editions - when a victim opens a specially crafted document. The root cause (CWE-822) enables memory corruption through unvalidated pointer values sourced from attacker-controlled file content, yielding full confidentiality, integrity, and availability compromise of the targeted user session. No public exploit or active exploitation has been identified at time of analysis; a vendor-released patch is available through Microsoft Update channels.

Heap-based buffer overflow in Microsoft Office, rooted in an integer underflow during document parsing, enables local code execution with high confidentiality, integrity, and availability impact when a user opens a specially crafted file. All major Office release channels on both Windows and Mac are affected, including Microsoft 365 Apps for Enterprise, Office LTSC 2024/2021/2019/2016, and their Mac equivalents. No public exploit has been identified at time of analysis, but a vendor-released patch is available via the Microsoft Security Response Center.

Heap-based buffer overflow in Microsoft Office Access enables local arbitrary code execution with full confidentiality, integrity, and availability impact across several Office product families. The vulnerability, rooted in CWE-122, affects Microsoft Access 2016 (both 32- and 64-bit editions), Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise. Exploitation requires local access and user interaction - consistent with a malicious database file delivery scenario - and a vendor patch is available; no public exploit code or active exploitation has been identified at time of analysis.

Stack-based buffer overflow in Microsoft Office Word enables local arbitrary code execution when a user opens a maliciously crafted document. Affected products span Word 2016 through Microsoft 365 Apps for Enterprise and LTSC 2021/2024 on both Windows and macOS. No public exploit identified at time of analysis, but Microsoft has released patches across all affected product lines via the August 2026 security update cycle.

Heap-based buffer overflow in Microsoft Office Access enables local code execution when a user opens a specially crafted Access database file. Affected products span Access 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise - representing a broad corporate user base. Vendor patch is available via MSRC; no public exploit or CISA KEV listing has been identified at time of analysis.

Code execution via buffer over-read in Microsoft Office Word affects multiple Windows and Mac Office product lines when a user opens a specially crafted document. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms this is a local exploitation scenario requiring user interaction - consistent with a malicious document delivery attack - yielding full confidentiality, integrity, and availability impact on the affected system. No special privileges are required from the attacker. No public exploit code or CISA KEV listing was identified in the provided intelligence at time of analysis.

Type confusion (CWE-843) in Microsoft Office enables local code execution across multiple Office product lines when a user opens a crafted file. Affected versions span Microsoft Office 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise on both Windows and macOS. With high confidentiality, integrity, and availability impact and user-interaction-only as the sole prerequisite, the vulnerability presents meaningful risk in phishing and malicious-document delivery scenarios. No public exploit identified at time of analysis, though a vendor patch is available.

Local code execution in Microsoft Office stems from an integer overflow that cascades into a heap-based buffer overflow (CWE-122), affecting Office 2016 through LTSC 2024 on both Windows and macOS. An unauthenticated attacker who can convince a target user to open a crafted Office document gains full code execution with the victim's privilege level - achieving high confidentiality, integrity, and availability impact per the CVSS:3.1 AV:L/C:H/I:H/A:H rating. No public exploit code or CISA KEV listing was identified at time of analysis, but the patch is vendor-confirmed and available via Microsoft's Security Update Guide.

Out-of-bounds memory read in Microsoft Office exposes potentially sensitive process memory contents when a victim opens a specially crafted document locally. The vulnerability affects the full Office suite across Windows and macOS - spanning Office 2016 through LTSC 2024, Office 365 for Mac, and Microsoft 365 Apps for Enterprise - with High confidentiality impact per CVSS but no integrity or availability consequence. No public exploit has been identified at time of analysis; CISA SSVC classifies exploitation status as none and the attack is not automatable, significantly reducing real-world prioritization urgency despite the High C rating.

Local code execution in Microsoft Office affects all major editions across Windows and macOS, including Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2019, and their Mac counterparts. The vulnerability is a heap-based buffer overflow (CWE-122) triggered when a user opens a specially crafted document, granting the attacker arbitrary code execution at the victim's privilege level. No public exploit has been identified at time of analysis, and a vendor-released patch is available, making this a high-priority patching target across enterprise Office deployments.

Heap-based buffer overflow in Microsoft Office allows local code execution across a wide range of Office versions on both Windows and macOS when a victim opens a specially crafted document. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms that no privileges are required - only that a user interacts with malicious content - making this practically reachable via phishing or drive-by document delivery despite the local attack vector. No active exploitation has been confirmed in CISA KEV, and no public exploit code has been identified at time of analysis; a vendor-released patch is available.

Local code execution in Microsoft Office results from an integer overflow that leads to a heap-based buffer overflow (CWE-122), enabling an attacker to run arbitrary code at the privilege level of the logged-in user. Affected products span multiple Windows and Mac release tracks including Office 2016, 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise. No public exploit or CISA KEV listing is present in the available data; however, the complete high CIA triad and wide deployment footprint make this a priority patching target.

Out-of-bounds read in Microsoft Office Word exposes potentially sensitive memory contents to local attackers when a victim opens a specially crafted document. Affected products span Microsoft Word 2016, Office 2019, Office LTSC 2021 and 2024, Office 365 for Mac, and Microsoft 365 Apps for Enterprise across both Windows and macOS platforms, with vendor-confirmed patches available. No public exploit code exists and CISA SSVC rates exploitation likelihood as none with only partial technical impact, making this a medium-priority patching item despite the High confidentiality score assigned by CVSS.

Out-of-bounds read in Microsoft Office Word's document parser enables local information disclosure across Windows and Mac product lines, including Office 2016, 2019, 2021, 2024 LTSC, and Microsoft 365 Apps. An attacker who supplies a crafted Word document can cause the application to read beyond allocated memory boundaries, leaking high-confidence memory contents to the attacker. No public exploit code has been identified at time of analysis, and the flaw is not listed in CISA KEV, though the broad affected product surface and low attack complexity make it a credible phishing delivery vehicle.

Out-of-bounds read (CWE-125) in Microsoft Office enables a local, unauthenticated attacker to disclose sensitive memory contents by convincing a user to open a specially crafted Office document. Affected products span the full modern Office portfolio - Office 2016 through Office LTSC 2024 and Microsoft 365 Apps for Enterprise. No public exploit code has been identified at time of analysis, and CISA SSVC rates exploitation as 'none' with non-automatable delivery, placing this in a lower operational urgency tier despite the High confidentiality impact rating.

Out-of-bounds read (CWE-125) in Microsoft Office Word exposes memory contents to a local, unauthenticated attacker who can trick a user into opening a crafted document, resulting in high-confidence information disclosure with no integrity or availability impact. The vulnerability spans eight distinct Office product lines across Windows and Mac, including Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise, broadening the exposure surface considerably. No public exploit code or active exploitation has been identified per SSVC (Exploitation: none); Microsoft has released patches via the standard Office update channel.

Stack-based buffer overflow in Microsoft Office Word enables arbitrary code execution when a victim opens a specially crafted document, affecting Word 2016 through Microsoft 365 Apps and Office LTSC 2024 on both Windows and macOS. The flaw (CWE-121) scores CVSS 7.8 with high impacts across confidentiality, integrity, and availability, constrained by local attack vector and mandatory user interaction. No public exploit has been identified at time of analysis; a vendor patch is available via the Microsoft Security Response Center.

Stack-based buffer overflow in Microsoft Office (CWE-121) enables local code execution across a broad range of affected builds including Office 2016, 2019, LTSC 2021, LTSC 2024, Office 365 for Mac, LTSC for Mac 2021/2024, and Microsoft 365 Apps for Enterprise. Exploitation requires user interaction - consistent with a maliciously crafted document delivery model - and achieves full confidentiality, integrity, and availability compromise within the Office process context. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor-released patch is available via the MSRC advisory.

Code execution in Microsoft Word stems from a numeric truncation error (CWE-197) in the document processing engine, affecting Word 2016, Office 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise. Exploitation requires a user to open a specially crafted document, after which an attacker can execute arbitrary code with full confidentiality, integrity, and availability impact under the victim's session. No public exploit code has been identified at time of analysis and this CVE is not listed in the CISA KEV catalog; however, Microsoft has confirmed and released a patch, indicating completed vendor triage.

Out-of-bounds read (CWE-125) in Microsoft Office exposes sensitive memory contents to local attackers who can persuade a user to open a specially crafted document. Affected products span multiple Office generations including Office 2016, 2019, 2021, 2024, LTSC variants, and Microsoft 365 Apps for Enterprise on both Windows and macOS. No public exploit has been identified at time of analysis, and CISA SSVC rates exploitation status as none with non-automatable delivery, aligning with the local, user-interaction-dependent CVSS vector.

Out-of-bounds read in Microsoft Office Word exposes high-confidentiality memory contents when a user opens a specially crafted document locally. Affected products span Word 2016, Office 2019, Office LTSC 2021/2024, and Microsoft 365 Apps for Enterprise, confirmed via EUVD-2026-56423. No public exploit identified at time of analysis and no CISA KEV listing; vendor patch is available, placing this in the routine-patch-cycle priority tier rather than emergency response.

Local code execution in Microsoft Office is possible when a user opens a specially crafted document that triggers a heap-based buffer overflow (CWE-122), granting the attacker full control over the victim's user session. The vulnerability spans the entire modern Office portfolio - Microsoft 365 Apps for Enterprise, Office 2019, LTSC 2021, LTSC 2024, and macOS equivalents - making the attack surface exceptionally broad. No public exploit identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog; Microsoft has released patches for all affected product lines.

Heap-based buffer overflow in Microsoft Office Word enables arbitrary local code execution when a user opens a specially crafted document. The vulnerability spans a broad set of affected products across both Windows and macOS platforms, including Office LTSC 2021/2024, Office 2019, Microsoft 365 Apps for Enterprise, Office 365 for Mac, and Outlook 2016. No public exploit code has been identified at time of analysis, though Microsoft has released a patch and the document-based delivery model is a proven and widely abused attack vector in enterprise phishing campaigns.

Out-of-bounds read in Microsoft Office exposes sensitive in-process memory contents to local attackers who socially engineer a victim into opening a crafted document. The flaw spans the full Microsoft Office portfolio across Windows and macOS - from Office 2016 through Microsoft 365 Apps for Enterprise - making it broadly relevant for enterprise patch management. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis; vendor patch is confirmed available.

Out-of-bounds read (CWE-125) in Microsoft Office enables local code execution across a broad range of Office product editions on both Windows and macOS. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms the attack requires no privileges but does require a victim to open a crafted file, consistent with a malicious document delivery scenario. A patch has been released by Microsoft; no public exploit code or CISA KEV listing has been identified at the time of analysis, though the full CIA impact (C:H/I:H/A:H) and breadth of affected products make this a high-priority patching target for enterprise environments.

Heap-based buffer overflow in Microsoft Office enables local code execution with high impact across confidentiality, integrity, and availability. Affecting Office 2016 through 2024, including LTSC and Microsoft 365 variants on both Windows and macOS, the vulnerability is triggered when a user opens a specially crafted document - requiring no privileges but mandatory user interaction (CVSS AV:L/UI:R). Patch is available from Microsoft; no public exploit identified at time of analysis.

Insufficiently protected credentials in Microsoft Office Outlook expose authentication material over network connections, enabling unauthenticated network-positioned attackers to perform spoofing attacks contingent on victim user interaction. The flaw affects Outlook 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise - collectively spanning nearly the entire current Outlook product line. Microsoft has released a patch; no public exploit or active exploitation (CISA KEV) has been identified at time of analysis.

Out-of-bounds read in Microsoft Office exposes sensitive memory contents to local attackers who can socially engineer a victim into opening a malicious document. Affected products span Office 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise across both Windows and macOS. No public exploit code is identified and SSVC rates exploitation as none, but the high confidentiality impact warrants timely patching for organizations whose users regularly handle documents from untrusted sources.

Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-822) that triggers when a user opens a maliciously crafted document. The CVSS 7.8 vector (AV:L/AC:L/PR:N/UI:R) reflects a classic client-side file-format attack requiring user interaction but no prior authentication, yielding full confidentiality, integrity, and availability impact on the targeted workstation. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but Office document parsers are historically high-value targets and the vulnerability was reported by Microsoft's own MSRC team.

Out-of-bounds read in Microsoft Office and SharePoint Server exposes low-level memory contents to a local attacker when a victim opens a crafted document. Affected products span Microsoft 365 Apps for Enterprise, Office 2016/2019/LTSC 2021/2024, Office for Mac variants, and SharePoint Server 2016/2019/Subscription Edition - all at version 16.0.x baselines. The CVSS score of 3.3 (Low) reflects constrained impact: confidentiality is only partially affected, integrity and availability are untouched, and exploitation requires both local access and user interaction. No public exploit identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.

Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-122) that an unauthenticated attacker can trigger when a user opens a crafted document. The CVSS 3.1 base score of 7.8 reflects high impact to confidentiality, integrity, and availability, with required user interaction limiting mass exploitation. There is no public exploit identified at time of analysis and the issue is not currently listed on the CISA KEV catalog.