Office 2019
Monthly
Stack-based buffer overflow in Microsoft Office Access enables a local unauthenticated attacker to achieve arbitrary code execution when a victim opens a specially crafted Access database file. Affected products span Microsoft Access 2016 (32-bit and 64-bit), Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise. No public exploit has been identified at time of analysis, and a vendor-released patch is available through the Microsoft Security Response Center.
Heap-based buffer overflow in Microsoft Office Word enables local code execution with High confidentiality, integrity, and availability impact when a user opens a specially crafted document. Affects Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Office LTSC 2021 and 2024, Word 2016, and corresponding Mac editions. No public exploit identified at time of analysis and the vulnerability is not listed in CISA KEV, but the broad product footprint and low attack complexity make patch application a near-term priority for enterprise defenders.
Heap-based buffer overflow (CWE-122) in Microsoft Office Access enables local code execution when a user opens a specially crafted database file, with full high-impact compromise of confidentiality, integrity, and availability (CVSS 7.8). Affected products span Microsoft Access 2016 through Microsoft 365 Apps for Enterprise and Office LTSC 2024. No public exploit or CISA KEV listing has been identified at time of analysis; a vendor patch is available via the Microsoft Security Response Center.
Stack-based buffer overflow in Microsoft Office Access enables local code execution with high impact across confidentiality, integrity, and availability. Affected products span Microsoft Access 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise - all at version 16.0.x or 19.0.x prior to the patched releases. An attacker who can deliver a malicious Access file and induce a local user to open it can achieve arbitrary code execution in the context of that user. No public exploit has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog.
Local code execution via heap-based buffer overflow in Microsoft Office affects multiple product lines including Office 2019, 2021, 2024 LTSC, and Microsoft 365 Apps for Enterprise. An integer overflow or wraparound during document parsing leads to an undersized heap allocation (CWE-122), enabling arbitrary code execution at the privilege level of the opening user when a victim opens a maliciously crafted Office file. No public exploit code has been identified at time of analysis, and no CISA KEV listing is present, though the full-triad high-impact CVSS score of 7.8 reflects the severity of successful exploitation.
Local code execution via untrusted pointer dereference in Microsoft Office affects multiple product lines - Microsoft 365 Apps for Enterprise, Office 2019, Office LTSC 2021/2024, and Mac editions - when a victim opens a specially crafted document. The root cause (CWE-822) enables memory corruption through unvalidated pointer values sourced from attacker-controlled file content, yielding full confidentiality, integrity, and availability compromise of the targeted user session. No public exploit or active exploitation has been identified at time of analysis; a vendor-released patch is available through Microsoft Update channels.
Heap-based buffer overflow in Microsoft Office, rooted in an integer underflow during document parsing, enables local code execution with high confidentiality, integrity, and availability impact when a user opens a specially crafted file. All major Office release channels on both Windows and Mac are affected, including Microsoft 365 Apps for Enterprise, Office LTSC 2024/2021/2019/2016, and their Mac equivalents. No public exploit has been identified at time of analysis, but a vendor-released patch is available via the Microsoft Security Response Center.
Heap-based buffer overflow in Microsoft Office Access enables local arbitrary code execution with full confidentiality, integrity, and availability impact across several Office product families. The vulnerability, rooted in CWE-122, affects Microsoft Access 2016 (both 32- and 64-bit editions), Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise. Exploitation requires local access and user interaction - consistent with a malicious database file delivery scenario - and a vendor patch is available; no public exploit code or active exploitation has been identified at time of analysis.
Stack-based buffer overflow in Microsoft Office Word enables local arbitrary code execution when a user opens a maliciously crafted document. Affected products span Word 2016 through Microsoft 365 Apps for Enterprise and LTSC 2021/2024 on both Windows and macOS. No public exploit identified at time of analysis, but Microsoft has released patches across all affected product lines via the August 2026 security update cycle.
Heap-based buffer overflow in Microsoft Office Access enables local code execution when a user opens a specially crafted Access database file. Affected products span Access 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise - representing a broad corporate user base. Vendor patch is available via MSRC; no public exploit or CISA KEV listing has been identified at time of analysis.
Code execution via buffer over-read in Microsoft Office Word affects multiple Windows and Mac Office product lines when a user opens a specially crafted document. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms this is a local exploitation scenario requiring user interaction - consistent with a malicious document delivery attack - yielding full confidentiality, integrity, and availability impact on the affected system. No special privileges are required from the attacker. No public exploit code or CISA KEV listing was identified in the provided intelligence at time of analysis.
Type confusion (CWE-843) in Microsoft Office enables local code execution across multiple Office product lines when a user opens a crafted file. Affected versions span Microsoft Office 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise on both Windows and macOS. With high confidentiality, integrity, and availability impact and user-interaction-only as the sole prerequisite, the vulnerability presents meaningful risk in phishing and malicious-document delivery scenarios. No public exploit identified at time of analysis, though a vendor patch is available.
Local code execution in Microsoft Office stems from an integer overflow that cascades into a heap-based buffer overflow (CWE-122), affecting Office 2016 through LTSC 2024 on both Windows and macOS. An unauthenticated attacker who can convince a target user to open a crafted Office document gains full code execution with the victim's privilege level - achieving high confidentiality, integrity, and availability impact per the CVSS:3.1 AV:L/C:H/I:H/A:H rating. No public exploit code or CISA KEV listing was identified at time of analysis, but the patch is vendor-confirmed and available via Microsoft's Security Update Guide.
Local code execution in Microsoft Office affects all major editions across Windows and macOS, including Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2019, and their Mac counterparts. The vulnerability is a heap-based buffer overflow (CWE-122) triggered when a user opens a specially crafted document, granting the attacker arbitrary code execution at the victim's privilege level. No public exploit has been identified at time of analysis, and a vendor-released patch is available, making this a high-priority patching target across enterprise Office deployments.
Heap-based buffer overflow in Microsoft Office allows local code execution across a wide range of Office versions on both Windows and macOS when a victim opens a specially crafted document. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms that no privileges are required - only that a user interacts with malicious content - making this practically reachable via phishing or drive-by document delivery despite the local attack vector. No active exploitation has been confirmed in CISA KEV, and no public exploit code has been identified at time of analysis; a vendor-released patch is available.
Local code execution in Microsoft Office results from an integer overflow that leads to a heap-based buffer overflow (CWE-122), enabling an attacker to run arbitrary code at the privilege level of the logged-in user. Affected products span multiple Windows and Mac release tracks including Office 2016, 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise. No public exploit or CISA KEV listing is present in the available data; however, the complete high CIA triad and wide deployment footprint make this a priority patching target.
Stack-based buffer overflow in Microsoft Office Word enables arbitrary code execution when a victim opens a specially crafted document, affecting Word 2016 through Microsoft 365 Apps and Office LTSC 2024 on both Windows and macOS. The flaw (CWE-121) scores CVSS 7.8 with high impacts across confidentiality, integrity, and availability, constrained by local attack vector and mandatory user interaction. No public exploit has been identified at time of analysis; a vendor patch is available via the Microsoft Security Response Center.
Stack-based buffer overflow in Microsoft Office (CWE-121) enables local code execution across a broad range of affected builds including Office 2016, 2019, LTSC 2021, LTSC 2024, Office 365 for Mac, LTSC for Mac 2021/2024, and Microsoft 365 Apps for Enterprise. Exploitation requires user interaction - consistent with a maliciously crafted document delivery model - and achieves full confidentiality, integrity, and availability compromise within the Office process context. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor-released patch is available via the MSRC advisory.
Code execution in Microsoft Word stems from a numeric truncation error (CWE-197) in the document processing engine, affecting Word 2016, Office 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise. Exploitation requires a user to open a specially crafted document, after which an attacker can execute arbitrary code with full confidentiality, integrity, and availability impact under the victim's session. No public exploit code has been identified at time of analysis and this CVE is not listed in the CISA KEV catalog; however, Microsoft has confirmed and released a patch, indicating completed vendor triage.
Local code execution in Microsoft Office is possible when a user opens a specially crafted document that triggers a heap-based buffer overflow (CWE-122), granting the attacker full control over the victim's user session. The vulnerability spans the entire modern Office portfolio - Microsoft 365 Apps for Enterprise, Office 2019, LTSC 2021, LTSC 2024, and macOS equivalents - making the attack surface exceptionally broad. No public exploit identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog; Microsoft has released patches for all affected product lines.
Heap-based buffer overflow in Microsoft Office Word enables arbitrary local code execution when a user opens a specially crafted document. The vulnerability spans a broad set of affected products across both Windows and macOS platforms, including Office LTSC 2021/2024, Office 2019, Microsoft 365 Apps for Enterprise, Office 365 for Mac, and Outlook 2016. No public exploit code has been identified at time of analysis, though Microsoft has released a patch and the document-based delivery model is a proven and widely abused attack vector in enterprise phishing campaigns.
Out-of-bounds read (CWE-125) in Microsoft Office enables local code execution across a broad range of Office product editions on both Windows and macOS. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms the attack requires no privileges but does require a victim to open a crafted file, consistent with a malicious document delivery scenario. A patch has been released by Microsoft; no public exploit code or CISA KEV listing has been identified at the time of analysis, though the full CIA impact (C:H/I:H/A:H) and breadth of affected products make this a high-priority patching target for enterprise environments.
Heap-based buffer overflow in Microsoft Office enables local code execution with high impact across confidentiality, integrity, and availability. Affecting Office 2016 through 2024, including LTSC and Microsoft 365 variants on both Windows and macOS, the vulnerability is triggered when a user opens a specially crafted document - requiring no privileges but mandatory user interaction (CVSS AV:L/UI:R). Patch is available from Microsoft; no public exploit identified at time of analysis.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-822) that triggers when a user opens a maliciously crafted document. The CVSS 7.8 vector (AV:L/AC:L/PR:N/UI:R) reflects a classic client-side file-format attack requiring user interaction but no prior authentication, yielding full confidentiality, integrity, and availability impact on the targeted workstation. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but Office document parsers are historically high-value targets and the vulnerability was reported by Microsoft's own MSRC team.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-122) that an unauthenticated attacker can trigger when a user opens a crafted document. The CVSS 3.1 base score of 7.8 reflects high impact to confidentiality, integrity, and availability, with required user interaction limiting mass exploitation. There is no public exploit identified at time of analysis and the issue is not currently listed on the CISA KEV catalog.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow that an unauthorized attacker can trigger without user interaction. The flaw carries a CVSS 3.1 score of 8.4 with high impact across confidentiality, integrity, and availability, and no public exploit identified at time of analysis. Despite requiring local access, the absence of authentication and user-interaction requirements makes this a notable priority for endpoint patching cycles.
Local code execution in Microsoft Office via a heap-based buffer overflow allows an unauthorized attacker to run arbitrary code with the privileges of the user opening a malicious document. The CVSS vector (AV:L/PR:N/UI:N) indicates local attack vector without required authentication or user interaction, an unusual combination that warrants verification against the vendor advisory. No public exploit identified at time of analysis and the issue is not currently listed in CISA KEV.
Local code execution in Microsoft Office Word enables an attacker to run arbitrary code in the context of the current user by tricking them into opening a malicious document that triggers an untrusted pointer dereference. With a CVSS 7.8 score and no public exploit identified at time of analysis, the flaw is exploited locally but unauthenticated, relying on user interaction to open a crafted file. Microsoft has issued an advisory via the MSRC Security Update Guide.
Local code execution in Microsoft Office Excel results from an integer underflow (CWE-122 heap-based) that allows an unauthorized attacker to run arbitrary code in the context of the user opening a crafted spreadsheet. The CVSS 7.8 score reflects local attack vector with required user interaction, and no public exploit identified at time of analysis. Microsoft (secure@microsoft.com) is the originating CNA, and the issue is tagged as a buffer/heap overflow class flaw.
Local code execution in Microsoft Office is possible via a heap-based buffer overflow that an unauthorized attacker can trigger without user interaction, yielding full confidentiality, integrity, and availability impact on the host. The flaw is rated 8.4 (CVSS:3.1) and was disclosed by Microsoft's Security Response Center, but no public exploit has been identified at the time of analysis. Despite the CWE-121 tagging as a stack overflow, the description and CWE-122 class indicate the corruption occurs on the heap, so defenders should treat this as a memory-corruption RCE-class issue requiring prompt patching.
Local code execution in Microsoft Office via a heap-based buffer overflow that lets an unauthorized attacker run arbitrary code in the context of the current user. The flaw carries a CVSS 8.4 rating driven by high impact across confidentiality, integrity, and availability, and no public exploit identified at time of analysis. Despite the 'unauthorized' wording, the CVSS vector specifies a local attack vector, indicating the attacker must already be able to deliver a crafted file or run code on the target system.
Local code execution in Microsoft Office via a type confusion flaw (CWE-416) permits unauthorized attackers to run arbitrary code in the context of the Office process without requiring privileges or user interaction. The issue carries a high CVSS 3.1 score of 8.4 with full impact across confidentiality, integrity, and availability, though exploitation requires local attack vector access to the target system. No public exploit identified at time of analysis, and the vulnerability is not currently listed in CISA KEV.
Local code execution in Microsoft Office stems from a type confusion (CWE-843) flaw that allows an unauthenticated attacker with local access to run arbitrary code in the context of the Office process. The CVSS 8.4 score reflects high impact on confidentiality, integrity, and availability without requiring privileges or user interaction, though the attack vector is local. No public exploit is identified at time of analysis and the issue is not listed in CISA KEV.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-122) that triggers when a user opens or previews a maliciously crafted document. The CVSS 7.8 score reflects local attack vector with required user interaction, and no public exploit identified at time of analysis. Successful exploitation yields full confidentiality, integrity, and availability impact in the context of the current user.
Local code execution in Microsoft Office Excel stems from an integer underflow that, when triggered by opening a crafted spreadsheet, allows an attacker to run arbitrary code in the context of the current user. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R) confirms exploitation requires the victim to open a malicious file, and there is no public exploit identified at time of analysis. With a base score of 7.8 and full confidentiality, integrity, and availability impact, successful exploitation effectively gives the attacker the victim's privileges on the host.
Information disclosure in Microsoft Office Excel allows remote unauthenticated attackers to read out-of-bounds memory over a network, potentially exposing sensitive data from process memory. The CVSS 8.2 score reflects high confidentiality impact with no authentication or user interaction required per the CVSS vector. No public exploit identified at time of analysis and the vulnerability is not currently listed in CISA KEV.
Local code execution in Microsoft Office Excel stems from an integer underflow condition that can be triggered when a victim opens a malicious spreadsheet, leading to out-of-bounds memory access (CWE-125). The flaw requires user interaction but no prior authentication on the target, and no public exploit identified at time of analysis. With a CVSS of 7.8 (high) and the typical phishing-friendly delivery model of Office files, this fits the profile of a document-based client-side RCE primitive.
Local code execution in Microsoft Office is possible when a user opens a maliciously crafted document that triggers a heap-based buffer overflow (CWE-122), allowing the attacker to run arbitrary code in the context of the opened Office process. The CVSS 7.8 (AV:L/AC:L/PR:N/UI:R) reflects a user-interaction-driven local exploit rather than a remote network attack, and no public exploit identified at time of analysis. The flaw was reported through Microsoft Security Response Center (secure@microsoft.com) and is tracked in MSRC's update guide.
Local code execution in Microsoft Office Excel can be achieved by an unauthenticated attacker who tricks a user into opening a malicious spreadsheet that triggers an integer underflow condition. The flaw carries a CVSS 7.0 rating reflecting high attack complexity and required user interaction, and no public exploit identified at time of analysis. There is a notable mismatch between the description (integer underflow) and the assigned CWE-362 (race condition), which warrants verification with Microsoft's advisory.
Local code execution in Microsoft Office Excel arises from an integer underflow condition that corrupts memory when a malicious spreadsheet is opened. The flaw requires user interaction (UI:R) to trigger but needs no prior authentication, enabling attackers to run arbitrary code in the security context of the victim user. At the time of analysis, no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Microsoft Publisher Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity.
Microsoft Project Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Microsoft Outlook Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Out-of-bounds read in Microsoft Office Excel's file parser allows a local attacker to disclose process memory contents when a victim opens a specially crafted Excel document. Affected across all major release channels including Excel 2016, Office 2019, LTSC 2021, LTSC 2024, Microsoft 365 Apps for Enterprise, and Mac variants. No public exploit has been identified at time of analysis, and SSVC classifies exploitation as none with non-automatable delivery.
Buffer over-read (CWE-126) in Microsoft Word's document parsing code allows local disclosure of in-process memory when a victim opens a specially crafted file. All currently-supported Office release lines on Windows - 365 Apps for Enterprise, Office 2019, 2021, 2024 LTSC, and Word 2016 standalone - are affected across both x86 and x64 architectures. No public exploit code has been identified, and SSVC rates exploitation as 'none' with technical impact 'partial', consistent with the moderate CVSS 5.5 rating.
Buffer over-read (CWE-126) in Microsoft Office Word allows local information disclosure when a user opens a specially crafted document, exposing process memory contents with high-confidentiality impact. Affected builds span Word 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise across both x86 and x64 architectures. No public exploit has been identified at time of analysis, SSVC rates exploitation as none and the attack as non-automatable, and vendor patches are available for all affected product lines.
Uninitialized resource use (CWE-908) in Microsoft Excel allows a local attacker to disclose process memory contents when a user opens a specially crafted workbook. Affected products span Excel 2016 through Microsoft 365 Apps for Enterprise on both Windows and macOS, with vendor patches released across all Windows builds. No public exploit has been identified and SSVC rates exploitation as none with partial technical impact, placing real-world risk firmly in the moderate range despite the C:H CVSS metric.
Type confusion (CWE-843) in Microsoft Office Excel enables local information disclosure when a victim opens a specially crafted Excel file. Affected products span Excel 2016, Office 2019, Office LTSC 2021/2024, Microsoft 365 Apps for Enterprise, Office Online Server, and multiple Mac Office variants. The vulnerability carries a CVSS 5.5 with High confidentiality impact but no integrity or availability impact; no public exploit or active exploitation has been identified at time of analysis.
Out-of-bounds memory read in Microsoft Excel exposes potentially sensitive in-process memory contents when a user opens a specially crafted workbook. Affects a wide range of Office versions including Microsoft 365 Apps for Enterprise, Office 2016 through LTSC 2024, and Office for Mac editions. SSVC assessment rates exploitation as none with non-automatable attack delivery, and Microsoft has released patches addressing all affected branches. No public exploit or CISA KEV listing exists at time of analysis.
Buffer over-read (CWE-126) in Microsoft Office Excel allows a local attacker to disclose potentially sensitive process memory when a user opens a crafted Excel workbook. The flaw spans a broad range of Office versions from 2016 through LTSC 2024, including Microsoft 365 Apps for Enterprise and Mac variants, making the affected footprint very large. No public exploit code or CISA KEV listing has been identified; exploitation depends on social engineering to deliver a malicious file to the local system.
Out-of-bounds read in Microsoft Excel allows a local, unauthenticated attacker to disclose potentially sensitive memory contents by convincing a user to open a specially crafted workbook. Affected builds span Excel 2016 through Microsoft 365 Apps for Enterprise on both Windows and macOS. No public exploit code exists and CISA SSVC rates exploitation as 'none' with partial technical impact, making this a moderate-priority patch-cycle item rather than an urgent emergency.
Sensitive system information disclosure in Microsoft Excel allows a local, unauthenticated attacker to read high-confidentiality data when a victim opens a specially crafted spreadsheet. Affecting Office 2016 through LTSC 2024 on both Windows and Mac, the flaw (CWE-497) exposes internal system data - such as memory layout, environment variables, or path information - to an unauthorized control sphere during file parsing. No public exploit has been identified at time of analysis, and Microsoft has released patches across all affected product lines.
Out-of-bounds read in Microsoft Excel discloses sensitive memory contents when a victim opens a specially crafted Excel file. The vulnerability spans a wide range of affected versions including Excel 2016, Office 2019, LTSC 2021/2024, Office 365 for Mac, and Microsoft 365 Apps for Enterprise, making the patch surface broad across enterprise environments. No public exploit or active exploitation has been identified at time of analysis; vendor patch is available via MSRC.
Out-of-bounds read in Microsoft Excel across Office 2016 through 365 Apps for Enterprise permits a local, unauthenticated attacker to disclose sensitive memory contents when a victim opens a specially crafted spreadsheet file. The vulnerability carries a CVSS 5.5 score reflecting the local delivery requirement and confidentiality-only impact, with no integrity or availability consequences. No public exploit code or active exploitation has been identified at time of analysis, and vendor patches are available for all major Windows Office editions.
Uninitialized memory disclosure in Microsoft Excel exposes potentially sensitive heap or stack contents when a victim opens a crafted document, allowing an unauthenticated attacker to read process memory with high confidentiality impact. Affected product lines span Excel 2016 through Microsoft 365 Apps for Enterprise and multiple Mac variants, making this a broad-surface vulnerability. No public exploit code and no CISA KEV listing have been identified at time of analysis; SSVC assessment rates exploitation as 'none' with non-automatable delivery, limiting realistic risk to targeted document-delivery campaigns.
Out-of-bounds read in Microsoft Office Excel's file parser allows local information disclosure when a victim opens a specially crafted workbook. Affecting Excel 2016 through Microsoft 365 Apps for Enterprise, Office LTSC 2024, Office Online Server, and multiple macOS Office variants, the vulnerability (CWE-125) exposes process memory with high confidentiality impact but no integrity or availability consequences. Microsoft has released patched builds via MSRC; SSVC confirms no active exploitation and non-automatable delivery, placing this squarely within standard monthly patch-cycle priority.
Microsoft Office Excel exposes sensitive system information to an unauthorized control sphere (CWE-497), enabling local information disclosure when a victim opens a specially crafted Excel file. The vulnerability spans Excel 2016 through Microsoft 365 Apps for Enterprise and multiple LTSC editions on both Windows and Mac. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, though the C:H CVSS confidentiality rating indicates the quality or quantity of information that can be exfiltrated is significant.
Uninitialized resource use (CWE-908) in Microsoft Office exposes high-confidentiality data to remote unauthenticated attackers when a victim opens a specially crafted Office document. The vulnerability spans the full Microsoft Office ecosystem - Office 2016, 2019, LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and Mac variants - making the affected surface extremely broad. No public exploit code and no active exploitation have been identified at time of analysis; Microsoft has released patches across all affected product lines.
Out-of-bounds memory read in Microsoft Office Word discloses potentially sensitive process memory contents when a victim opens a specially crafted document, affecting Microsoft 365 Apps for Enterprise, Office 2019, Office 2021 LTSC, Office 2024 LTSC, Word 2016, and macOS editions across both Windows and macOS platforms. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) confirms this is a network-delivered, low-complexity information-disclosure flaw requiring user interaction but no attacker-side privileges. Vendor patch is confirmed available via Microsoft MSRC; no active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis.
Out-of-bounds read in Microsoft Office (CWE-125) allows a remote unauthenticated attacker to disclose sensitive memory contents when a victim opens a specially crafted document. Affected products span Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2016/2019, and their Mac counterparts - covering virtually the entire active Office install base. No public exploit code or active exploitation has been identified; SSVC rates the exploitation likelihood as none and technical impact as partial, consistent with the 6.5 CVSS base score.
Out-of-bounds read in Microsoft Word across Office 2016 through Microsoft 365 Apps enables an unauthenticated remote attacker to disclose sensitive memory contents when a user opens a crafted document. The vulnerability (CWE-125) affects both Windows (x86/x64) and macOS deployments of the Office suite across multiple release tracks - retail, LTSC, and subscription. No public exploit or active exploitation has been identified at time of analysis, though the broad install base and socially-engineered document delivery make this a realistic phishing vector.
Heap-based buffer overflow in Microsoft Office leaks sensitive memory contents to unauthenticated network attackers when a victim opens a specially crafted document. Affected products span Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise on both Windows and macOS, making the exposure surface extremely broad. Vendor-released patches are available; no public exploit or CISA KEV listing has been identified at time of analysis, but the low-complexity, no-privilege vector warrants prompt patching across enterprise fleets.
Out-of-bounds memory read in Microsoft PowerPoint's file-parsing logic exposes sensitive process memory when a victim opens a specially crafted presentation file, allowing a remote unauthenticated attacker to disclose heap or stack contents. Affected builds span Microsoft 365 Apps for Enterprise, Office 2019, Office LTSC 2021, and Office LTSC 2024 on both Windows and macOS platforms. Microsoft has released patched builds via the MSRC advisory; no public exploit identified at time of analysis.
Out-of-bounds read (CWE-125) in Microsoft Office Outlook allows a remote unauthenticated attacker to leak process memory contents when a victim opens or previews a crafted email message or attachment. All major Office branches are affected - Office 2016, 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise - spanning hundreds of millions of endpoints globally. Microsoft has released patches across all affected branches; no public exploit code exists and CISA SSVC rates exploitation as 'none' at the time of analysis.
Out-of-bounds read in Microsoft Office exposes sensitive memory contents to a remote, unauthenticated attacker who can convince a user to open a crafted document. The flaw (CWE-125) affects the full current Office portfolio - Office 2019, LTSC 2021, LTSC 2024, Microsoft 365 Apps for Enterprise, and their macOS counterparts - with high confidentiality impact and no integrity or availability consequence. No public exploit identified at time of analysis; vendor-released patches are available for all Windows versions with specific build thresholds.
Out-of-bounds read in Microsoft Office Word's document parser allows a remote unauthenticated attacker to disclose sensitive memory contents when a victim opens a crafted Word file. Affecting Word 2016, Office 2019/2021/2024 LTSC, and Microsoft 365 Apps for Enterprise across both x86 and x64 builds, the vulnerability carries a CVSS 6.5 with C:H but no integrity or availability impact. No public exploit or CISA KEV listing exists at time of analysis; SSVC rates exploitation as none and the attack as not automatable, moderating operational urgency despite the broad product footprint.
Out-of-bounds read in multiple Microsoft Office SKUs allows a remote unauthenticated attacker to disclose in-process memory contents by inducing a user to open a specially crafted document. Affected builds span Microsoft 365 Apps for Enterprise, Office 2019/2021/2024 LTSC on Windows, and multiple Mac variants. Exploitation yields high confidentiality impact with no integrity or availability consequence; no public exploit code or active exploitation has been identified at time of analysis.
Out-of-bounds read in Microsoft Office exposes arbitrary memory contents to a remote unauthenticated attacker who can convince a user to open a malicious file, resulting in high-confidence information disclosure. Affected versions span Microsoft Office 2019, LTSC 2021, LTSC 2024, Microsoft 365 Apps for Enterprise, and their macOS equivalents. No public exploit code has been identified and this vulnerability is not listed in CISA KEV at time of analysis, though the phishing-file delivery model is a well-established Office exploitation pattern.
Out-of-bounds read in Microsoft Office Outlook allows a remote, unauthenticated attacker to disclose sensitive information from process memory by inducing a user to open or interact with a maliciously crafted email or document. Affected products span Outlook 2016 through Microsoft 365 Apps for Enterprise, covering a large portion of the enterprise desktop install base. No public exploit code and no CISA KEV listing have been identified at time of analysis; Microsoft has released patches across all affected product lines via MSRC.
Out-of-bounds read in Microsoft Office Word allows an unauthenticated remote attacker to disclose memory contents when a victim opens a specially crafted document, affecting Word 2016 through Microsoft 365 Apps for Enterprise and Office LTSC 2024 on both x86 and x64 platforms. The flaw (CWE-125) resides in Word's document parser and can expose heap or stack memory to the attacker-controlled document, but is limited strictly to confidentiality impact - no code execution or integrity violation is possible from this flaw alone. Vendor-released patches are available across all affected product lines; no active exploitation has been identified and no public exploit code is known at time of analysis.
Out-of-bounds read in Microsoft Office Outlook and closely related Office suite components exposes sensitive in-memory data to network-based attackers who can deliver a crafted document to a user. The CVSS vector (C:H/I:N/A:N) and CWE-125 (Out-of-bounds Read) align on an information-disclosure primary impact, while Microsoft's description references code execution - a material discrepancy that warrants verification against the full MSRC advisory. Patches are available from Microsoft across all affected product lines including Office 2016 through 2024 LTSC and Microsoft 365 Apps on both Windows and macOS; no public exploit code and no CISA KEV listing have been identified at time of analysis.
Out-of-bounds read in Microsoft Excel enables an unauthenticated remote attacker to disclose sensitive memory contents when a victim opens a crafted Excel file. The vulnerability spans a broad range of Office product lines - including Office 2016, 2019, 2021 LTSC, 2024 LTSC, Microsoft 365 Apps for Enterprise, and Mac variants - making the exposure surface wide. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; a vendor patch is available via Microsoft's update guide.
Out-of-bounds read in Microsoft Office PowerPoint exposes process memory contents to a local attacker when a victim opens a specially crafted presentation file. Affected across a wide range of Office versions - PowerPoint 2016, Office 2019, LTSC 2021, LTSC 2024, Office 365/Microsoft 365 Apps for Enterprise on both Windows and Mac platforms. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; vendor patch is available.
Improper null termination (CWE-170) in Microsoft Office Word's document-processing pipeline allows a local attacker to read beyond a string buffer boundary, disclosing sensitive in-memory data when a victim opens a crafted document. Affected products span Microsoft 365 Apps for Enterprise, Office 2019/2021/2024 LTSC, Word 2016, and Mac variants across Windows (x64/x86) and macOS. No active exploitation is confirmed (SSVC Exploitation: none; no KEV listing), and Microsoft has released fixed builds across all affected product lines.
Out-of-bounds read in Microsoft Office Word enables remote attackers to disclose high-value in-process memory contents by convincing a user to open a specially crafted document. Affecting Microsoft 365 Apps for Enterprise, Word 2016, Office 2019/2021/2024 LTSC on Windows (x86/x64) and Office for Mac editions, this CWE-125 flaw requires no attacker authentication but does require victim interaction. No public exploit has been identified at time of analysis, and CISA SSVC rates exploitation as none with non-automatable delivery, consistent with the phishing/social-engineering delivery model implied by the UI:R CVSS metric.
Out-of-bounds read (CWE-125) in Microsoft Word's document-parsing engine enables remote information disclosure across Microsoft 365 Apps, Office 2019, 2021, and 2024 LTSC on both Windows and macOS. An unauthenticated remote attacker (per CVSS PR:N) can cause Word to read beyond an allocated buffer when a victim opens a crafted document, potentially leaking sensitive memory contents to an attacker-controlled endpoint. No public exploit code or active exploitation has been identified at time of analysis; SSVC rates the attack as non-automatable with partial technical impact, placing this squarely in routine patch-cycle response rather than emergency remediation.
Out-of-bounds memory read in Microsoft Office Word's document parser exposes sensitive process memory to remote attackers when a victim opens a specially crafted Word file. The flaw spans Word 2016 through Office LTSC 2024 and Microsoft 365 Apps on both Windows (x86/x64) and macOS. SSVC assessment confirms no known active exploitation and the attack is not automatable, placing real-world priority below the CVSS 6.5 headline score suggests.
Out-of-bounds read in Microsoft Office PowerPoint exposes memory contents to remote attackers when a victim opens a specially crafted PowerPoint file. Affected products span PowerPoint 2016 through Microsoft 365 Apps for Enterprise across Windows and Mac. No public exploit code has been identified and SSVC classifies exploitation as none and not automatable, consistent with the user-interaction requirement that prevents mass exploitation.
Out-of-bounds read in Microsoft Word across Office 2016, 2019, 2021 LTSC, 2024 LTSC, and Microsoft 365 Apps for Enterprise on both Windows and macOS allows a locally authenticated, low-privileged user to disclose adjacent process memory by opening a specially crafted document. The flaw carries a High confidentiality impact with no integrity or availability effects, and requires user interaction to trigger. No public exploit code or active exploitation has been identified at time of analysis; CISA SSVC rates exploitation status as none and automation as infeasible.
Out-of-bounds read (CWE-125) in Microsoft PowerPoint exposes memory contents to remote unauthenticated attackers who can convince a user to open a specially crafted presentation file. All major Office release channels are affected, including Microsoft 365 Apps for Enterprise, Office 2019, PowerPoint 2016, Office LTSC 2021, and Office LTSC 2024, on both Windows and Mac platforms. No public exploit or active exploitation has been confirmed; SSVC assessment rates exploitation as none and technical impact as partial, consistent with a CVSS 6.5 medium-severity information disclosure finding.
Buffer over-read (CWE-126) in Microsoft Office Excel's file parsing engine allows remote information disclosure when a user opens a crafted spreadsheet file. Affected versions span Office 2016 through Office 2024 LTSC and Microsoft 365 Apps for Enterprise across Windows and Mac platforms, with fixed builds confirmed for Windows variants per EUVD-2026-73733. No public exploit code has been identified at time of analysis, and SSVC rates current exploitation as none with partial technical impact, consistent with the absence of a CISA KEV listing.
Untrusted pointer dereference in Microsoft Office PowerPoint exposes high-confidentiality memory contents to a remote, unauthenticated attacker who can convince a user to open a specially crafted presentation file. The flaw (CWE-822) allows the application to dereference a pointer sourced from untrusted file data without validation, enabling out-of-bounds or arbitrary memory reads that leak sensitive process memory over a network context. No public exploit code or CISA KEV listing is present at time of analysis, but the high-confidentiality CVSS rating and broad install base across all current Office versions make patch deployment a priority.
Type confusion (CWE-822) in Microsoft Office PowerPoint allows a remote unauthenticated attacker to disclose sensitive information from a victim's system by inducing them to open a specially crafted presentation file. The vulnerability spans Microsoft 365 Apps for Enterprise, Office LTSC 2021 and 2024, Office 2019, and Mac variants of Office across multiple release channels. Vendor-released patches are available for Windows editions with specific fixed build numbers; no public exploit has been identified at time of analysis.
Integer overflow in Microsoft Office Word's document parsing engine triggers an out-of-bounds read (CWE-125), enabling a remote unauthenticated attacker to disclose potentially sensitive memory contents by inducing a victim to open a specially crafted document. Affected products span Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise on both Windows and macOS. Microsoft has released patches across all affected versions; no confirmed active exploitation or public exploit code has been identified at time of analysis.
Buffer over-read (CWE-126) in Microsoft Office Word exposes sensitive process memory to a remote unauthenticated attacker who can deliver a maliciously crafted Word document and trick a user into opening it. The flaw affects a broad range of Microsoft Office products - Microsoft 365 Apps for Enterprise, Office 2019/2021/2024 LTSC, and Word 2016 - across both Windows (x86/x64) and macOS platforms. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-supplied patches have been released addressing specific build versions across all affected product lines.
Buffer over-read (CWE-126) in Microsoft Office exposes process memory contents to remote unauthenticated attackers when a victim opens a maliciously crafted Office document. The vulnerability spans a wide range of Office product lines across both Windows and macOS - including Office 2016, 2019, LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and the macOS Office 365/LTSC equivalents. No public exploit code has been identified and the CVE does not appear in the CISA KEV catalog at time of analysis; a vendor patch has been released across all affected product lines.
Insufficiently protected credential transmission in Microsoft Office exposes NTLM or equivalent credential material to a network-adjacent attacker via a crafted document or resource link. Affected versions span the entire active Office portfolio - Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise - making the exposure broadly relevant. An unauthenticated remote attacker who can induce a user to open a specially crafted Office file or embedded resource can capture credential hashes suitable for relay or offline cracking, constituting a practical spoofing primitive. No public exploit code or CISA KEV listing has been identified at the time of analysis, though Microsoft has released patches.
Out-of-bounds read in Microsoft Office Excel enables remote information disclosure when a user opens a specially crafted spreadsheet. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) confirms that an unauthenticated network-based attacker can trigger the flaw, but only after social engineering a victim into opening a malicious file. No public exploit code and no CISA KEV listing have been identified at time of analysis; Microsoft has released patches across all affected Office product lines.
Out-of-bounds read in Microsoft Excel exposes sensitive memory contents over a network to unauthenticated remote attackers, resulting in high-confidence information disclosure (C:H). Exploitation requires user interaction - specifically, opening a crafted Excel document - placing this firmly in the phishing/malicious-attachment delivery class. No active exploitation has been confirmed (not listed in CISA KEV), and no public exploit code has been identified at the time of analysis, though the patch is available and should be applied promptly given the ubiquity of the affected product across enterprise environments.
Information disclosure in Microsoft Office PowerPoint enables a local attacker to obtain sensitive data from a victim's system by exploiting improper input validation (CWE-20) when processing a malicious file. Affected products span Windows and Mac editions including Office 2019, Microsoft 365 Apps for Enterprise, LTSC 2021/2024, and Office 365 for Mac - all requiring the victim to open a crafted PowerPoint file (UI:R). No active exploitation has been confirmed by CISA KEV, and no public exploit code has been identified at time of analysis; however, a vendor patch is available.
Stack-based buffer overflow in Microsoft Office Access enables a local unauthenticated attacker to achieve arbitrary code execution when a victim opens a specially crafted Access database file. Affected products span Microsoft Access 2016 (32-bit and 64-bit), Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise. No public exploit has been identified at time of analysis, and a vendor-released patch is available through the Microsoft Security Response Center.
Heap-based buffer overflow in Microsoft Office Word enables local code execution with High confidentiality, integrity, and availability impact when a user opens a specially crafted document. Affects Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Office LTSC 2021 and 2024, Word 2016, and corresponding Mac editions. No public exploit identified at time of analysis and the vulnerability is not listed in CISA KEV, but the broad product footprint and low attack complexity make patch application a near-term priority for enterprise defenders.
Heap-based buffer overflow (CWE-122) in Microsoft Office Access enables local code execution when a user opens a specially crafted database file, with full high-impact compromise of confidentiality, integrity, and availability (CVSS 7.8). Affected products span Microsoft Access 2016 through Microsoft 365 Apps for Enterprise and Office LTSC 2024. No public exploit or CISA KEV listing has been identified at time of analysis; a vendor patch is available via the Microsoft Security Response Center.
Stack-based buffer overflow in Microsoft Office Access enables local code execution with high impact across confidentiality, integrity, and availability. Affected products span Microsoft Access 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise - all at version 16.0.x or 19.0.x prior to the patched releases. An attacker who can deliver a malicious Access file and induce a local user to open it can achieve arbitrary code execution in the context of that user. No public exploit has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog.
Local code execution via heap-based buffer overflow in Microsoft Office affects multiple product lines including Office 2019, 2021, 2024 LTSC, and Microsoft 365 Apps for Enterprise. An integer overflow or wraparound during document parsing leads to an undersized heap allocation (CWE-122), enabling arbitrary code execution at the privilege level of the opening user when a victim opens a maliciously crafted Office file. No public exploit code has been identified at time of analysis, and no CISA KEV listing is present, though the full-triad high-impact CVSS score of 7.8 reflects the severity of successful exploitation.
Local code execution via untrusted pointer dereference in Microsoft Office affects multiple product lines - Microsoft 365 Apps for Enterprise, Office 2019, Office LTSC 2021/2024, and Mac editions - when a victim opens a specially crafted document. The root cause (CWE-822) enables memory corruption through unvalidated pointer values sourced from attacker-controlled file content, yielding full confidentiality, integrity, and availability compromise of the targeted user session. No public exploit or active exploitation has been identified at time of analysis; a vendor-released patch is available through Microsoft Update channels.
Heap-based buffer overflow in Microsoft Office, rooted in an integer underflow during document parsing, enables local code execution with high confidentiality, integrity, and availability impact when a user opens a specially crafted file. All major Office release channels on both Windows and Mac are affected, including Microsoft 365 Apps for Enterprise, Office LTSC 2024/2021/2019/2016, and their Mac equivalents. No public exploit has been identified at time of analysis, but a vendor-released patch is available via the Microsoft Security Response Center.
Heap-based buffer overflow in Microsoft Office Access enables local arbitrary code execution with full confidentiality, integrity, and availability impact across several Office product families. The vulnerability, rooted in CWE-122, affects Microsoft Access 2016 (both 32- and 64-bit editions), Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise. Exploitation requires local access and user interaction - consistent with a malicious database file delivery scenario - and a vendor patch is available; no public exploit code or active exploitation has been identified at time of analysis.
Stack-based buffer overflow in Microsoft Office Word enables local arbitrary code execution when a user opens a maliciously crafted document. Affected products span Word 2016 through Microsoft 365 Apps for Enterprise and LTSC 2021/2024 on both Windows and macOS. No public exploit identified at time of analysis, but Microsoft has released patches across all affected product lines via the August 2026 security update cycle.
Heap-based buffer overflow in Microsoft Office Access enables local code execution when a user opens a specially crafted Access database file. Affected products span Access 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise - representing a broad corporate user base. Vendor patch is available via MSRC; no public exploit or CISA KEV listing has been identified at time of analysis.
Code execution via buffer over-read in Microsoft Office Word affects multiple Windows and Mac Office product lines when a user opens a specially crafted document. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms this is a local exploitation scenario requiring user interaction - consistent with a malicious document delivery attack - yielding full confidentiality, integrity, and availability impact on the affected system. No special privileges are required from the attacker. No public exploit code or CISA KEV listing was identified in the provided intelligence at time of analysis.
Type confusion (CWE-843) in Microsoft Office enables local code execution across multiple Office product lines when a user opens a crafted file. Affected versions span Microsoft Office 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise on both Windows and macOS. With high confidentiality, integrity, and availability impact and user-interaction-only as the sole prerequisite, the vulnerability presents meaningful risk in phishing and malicious-document delivery scenarios. No public exploit identified at time of analysis, though a vendor patch is available.
Local code execution in Microsoft Office stems from an integer overflow that cascades into a heap-based buffer overflow (CWE-122), affecting Office 2016 through LTSC 2024 on both Windows and macOS. An unauthenticated attacker who can convince a target user to open a crafted Office document gains full code execution with the victim's privilege level - achieving high confidentiality, integrity, and availability impact per the CVSS:3.1 AV:L/C:H/I:H/A:H rating. No public exploit code or CISA KEV listing was identified at time of analysis, but the patch is vendor-confirmed and available via Microsoft's Security Update Guide.
Local code execution in Microsoft Office affects all major editions across Windows and macOS, including Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2019, and their Mac counterparts. The vulnerability is a heap-based buffer overflow (CWE-122) triggered when a user opens a specially crafted document, granting the attacker arbitrary code execution at the victim's privilege level. No public exploit has been identified at time of analysis, and a vendor-released patch is available, making this a high-priority patching target across enterprise Office deployments.
Heap-based buffer overflow in Microsoft Office allows local code execution across a wide range of Office versions on both Windows and macOS when a victim opens a specially crafted document. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms that no privileges are required - only that a user interacts with malicious content - making this practically reachable via phishing or drive-by document delivery despite the local attack vector. No active exploitation has been confirmed in CISA KEV, and no public exploit code has been identified at time of analysis; a vendor-released patch is available.
Local code execution in Microsoft Office results from an integer overflow that leads to a heap-based buffer overflow (CWE-122), enabling an attacker to run arbitrary code at the privilege level of the logged-in user. Affected products span multiple Windows and Mac release tracks including Office 2016, 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise. No public exploit or CISA KEV listing is present in the available data; however, the complete high CIA triad and wide deployment footprint make this a priority patching target.
Stack-based buffer overflow in Microsoft Office Word enables arbitrary code execution when a victim opens a specially crafted document, affecting Word 2016 through Microsoft 365 Apps and Office LTSC 2024 on both Windows and macOS. The flaw (CWE-121) scores CVSS 7.8 with high impacts across confidentiality, integrity, and availability, constrained by local attack vector and mandatory user interaction. No public exploit has been identified at time of analysis; a vendor patch is available via the Microsoft Security Response Center.
Stack-based buffer overflow in Microsoft Office (CWE-121) enables local code execution across a broad range of affected builds including Office 2016, 2019, LTSC 2021, LTSC 2024, Office 365 for Mac, LTSC for Mac 2021/2024, and Microsoft 365 Apps for Enterprise. Exploitation requires user interaction - consistent with a maliciously crafted document delivery model - and achieves full confidentiality, integrity, and availability compromise within the Office process context. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor-released patch is available via the MSRC advisory.
Code execution in Microsoft Word stems from a numeric truncation error (CWE-197) in the document processing engine, affecting Word 2016, Office 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise. Exploitation requires a user to open a specially crafted document, after which an attacker can execute arbitrary code with full confidentiality, integrity, and availability impact under the victim's session. No public exploit code has been identified at time of analysis and this CVE is not listed in the CISA KEV catalog; however, Microsoft has confirmed and released a patch, indicating completed vendor triage.
Local code execution in Microsoft Office is possible when a user opens a specially crafted document that triggers a heap-based buffer overflow (CWE-122), granting the attacker full control over the victim's user session. The vulnerability spans the entire modern Office portfolio - Microsoft 365 Apps for Enterprise, Office 2019, LTSC 2021, LTSC 2024, and macOS equivalents - making the attack surface exceptionally broad. No public exploit identified at time of analysis and the vulnerability is not listed in the CISA KEV catalog; Microsoft has released patches for all affected product lines.
Heap-based buffer overflow in Microsoft Office Word enables arbitrary local code execution when a user opens a specially crafted document. The vulnerability spans a broad set of affected products across both Windows and macOS platforms, including Office LTSC 2021/2024, Office 2019, Microsoft 365 Apps for Enterprise, Office 365 for Mac, and Outlook 2016. No public exploit code has been identified at time of analysis, though Microsoft has released a patch and the document-based delivery model is a proven and widely abused attack vector in enterprise phishing campaigns.
Out-of-bounds read (CWE-125) in Microsoft Office enables local code execution across a broad range of Office product editions on both Windows and macOS. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms the attack requires no privileges but does require a victim to open a crafted file, consistent with a malicious document delivery scenario. A patch has been released by Microsoft; no public exploit code or CISA KEV listing has been identified at the time of analysis, though the full CIA impact (C:H/I:H/A:H) and breadth of affected products make this a high-priority patching target for enterprise environments.
Heap-based buffer overflow in Microsoft Office enables local code execution with high impact across confidentiality, integrity, and availability. Affecting Office 2016 through 2024, including LTSC and Microsoft 365 variants on both Windows and macOS, the vulnerability is triggered when a user opens a specially crafted document - requiring no privileges but mandatory user interaction (CVSS AV:L/UI:R). Patch is available from Microsoft; no public exploit identified at time of analysis.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-822) that triggers when a user opens a maliciously crafted document. The CVSS 7.8 vector (AV:L/AC:L/PR:N/UI:R) reflects a classic client-side file-format attack requiring user interaction but no prior authentication, yielding full confidentiality, integrity, and availability impact on the targeted workstation. There is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but Office document parsers are historically high-value targets and the vulnerability was reported by Microsoft's own MSRC team.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-122) that an unauthenticated attacker can trigger when a user opens a crafted document. The CVSS 3.1 base score of 7.8 reflects high impact to confidentiality, integrity, and availability, with required user interaction limiting mass exploitation. There is no public exploit identified at time of analysis and the issue is not currently listed on the CISA KEV catalog.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow that an unauthorized attacker can trigger without user interaction. The flaw carries a CVSS 3.1 score of 8.4 with high impact across confidentiality, integrity, and availability, and no public exploit identified at time of analysis. Despite requiring local access, the absence of authentication and user-interaction requirements makes this a notable priority for endpoint patching cycles.
Local code execution in Microsoft Office via a heap-based buffer overflow allows an unauthorized attacker to run arbitrary code with the privileges of the user opening a malicious document. The CVSS vector (AV:L/PR:N/UI:N) indicates local attack vector without required authentication or user interaction, an unusual combination that warrants verification against the vendor advisory. No public exploit identified at time of analysis and the issue is not currently listed in CISA KEV.
Local code execution in Microsoft Office Word enables an attacker to run arbitrary code in the context of the current user by tricking them into opening a malicious document that triggers an untrusted pointer dereference. With a CVSS 7.8 score and no public exploit identified at time of analysis, the flaw is exploited locally but unauthenticated, relying on user interaction to open a crafted file. Microsoft has issued an advisory via the MSRC Security Update Guide.
Local code execution in Microsoft Office Excel results from an integer underflow (CWE-122 heap-based) that allows an unauthorized attacker to run arbitrary code in the context of the user opening a crafted spreadsheet. The CVSS 7.8 score reflects local attack vector with required user interaction, and no public exploit identified at time of analysis. Microsoft (secure@microsoft.com) is the originating CNA, and the issue is tagged as a buffer/heap overflow class flaw.
Local code execution in Microsoft Office is possible via a heap-based buffer overflow that an unauthorized attacker can trigger without user interaction, yielding full confidentiality, integrity, and availability impact on the host. The flaw is rated 8.4 (CVSS:3.1) and was disclosed by Microsoft's Security Response Center, but no public exploit has been identified at the time of analysis. Despite the CWE-121 tagging as a stack overflow, the description and CWE-122 class indicate the corruption occurs on the heap, so defenders should treat this as a memory-corruption RCE-class issue requiring prompt patching.
Local code execution in Microsoft Office via a heap-based buffer overflow that lets an unauthorized attacker run arbitrary code in the context of the current user. The flaw carries a CVSS 8.4 rating driven by high impact across confidentiality, integrity, and availability, and no public exploit identified at time of analysis. Despite the 'unauthorized' wording, the CVSS vector specifies a local attack vector, indicating the attacker must already be able to deliver a crafted file or run code on the target system.
Local code execution in Microsoft Office via a type confusion flaw (CWE-416) permits unauthorized attackers to run arbitrary code in the context of the Office process without requiring privileges or user interaction. The issue carries a high CVSS 3.1 score of 8.4 with full impact across confidentiality, integrity, and availability, though exploitation requires local attack vector access to the target system. No public exploit identified at time of analysis, and the vulnerability is not currently listed in CISA KEV.
Local code execution in Microsoft Office stems from a type confusion (CWE-843) flaw that allows an unauthenticated attacker with local access to run arbitrary code in the context of the Office process. The CVSS 8.4 score reflects high impact on confidentiality, integrity, and availability without requiring privileges or user interaction, though the attack vector is local. No public exploit is identified at time of analysis and the issue is not listed in CISA KEV.
Local code execution in Microsoft Office is possible through a heap-based buffer overflow (CWE-122) that triggers when a user opens or previews a maliciously crafted document. The CVSS 7.8 score reflects local attack vector with required user interaction, and no public exploit identified at time of analysis. Successful exploitation yields full confidentiality, integrity, and availability impact in the context of the current user.
Local code execution in Microsoft Office Excel stems from an integer underflow that, when triggered by opening a crafted spreadsheet, allows an attacker to run arbitrary code in the context of the current user. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R) confirms exploitation requires the victim to open a malicious file, and there is no public exploit identified at time of analysis. With a base score of 7.8 and full confidentiality, integrity, and availability impact, successful exploitation effectively gives the attacker the victim's privileges on the host.
Information disclosure in Microsoft Office Excel allows remote unauthenticated attackers to read out-of-bounds memory over a network, potentially exposing sensitive data from process memory. The CVSS 8.2 score reflects high confidentiality impact with no authentication or user interaction required per the CVSS vector. No public exploit identified at time of analysis and the vulnerability is not currently listed in CISA KEV.
Local code execution in Microsoft Office Excel stems from an integer underflow condition that can be triggered when a victim opens a malicious spreadsheet, leading to out-of-bounds memory access (CWE-125). The flaw requires user interaction but no prior authentication on the target, and no public exploit identified at time of analysis. With a CVSS of 7.8 (high) and the typical phishing-friendly delivery model of Office files, this fits the profile of a document-based client-side RCE primitive.
Local code execution in Microsoft Office is possible when a user opens a maliciously crafted document that triggers a heap-based buffer overflow (CWE-122), allowing the attacker to run arbitrary code in the context of the opened Office process. The CVSS 7.8 (AV:L/AC:L/PR:N/UI:R) reflects a user-interaction-driven local exploit rather than a remote network attack, and no public exploit identified at time of analysis. The flaw was reported through Microsoft Security Response Center (secure@microsoft.com) and is tracked in MSRC's update guide.
Local code execution in Microsoft Office Excel can be achieved by an unauthenticated attacker who tricks a user into opening a malicious spreadsheet that triggers an integer underflow condition. The flaw carries a CVSS 7.0 rating reflecting high attack complexity and required user interaction, and no public exploit identified at time of analysis. There is a notable mismatch between the description (integer underflow) and the assigned CWE-362 (race condition), which warrants verification with Microsoft's advisory.
Local code execution in Microsoft Office Excel arises from an integer underflow condition that corrupts memory when a malicious spreadsheet is opened. The flaw requires user interaction (UI:R) to trigger but needs no prior authentication, enabling attackers to run arbitrary code in the security context of the victim user. At the time of analysis, no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Microsoft Publisher Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity.
Microsoft Project Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Microsoft Outlook Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Out-of-bounds read in Microsoft Office Excel's file parser allows a local attacker to disclose process memory contents when a victim opens a specially crafted Excel document. Affected across all major release channels including Excel 2016, Office 2019, LTSC 2021, LTSC 2024, Microsoft 365 Apps for Enterprise, and Mac variants. No public exploit has been identified at time of analysis, and SSVC classifies exploitation as none with non-automatable delivery.
Buffer over-read (CWE-126) in Microsoft Word's document parsing code allows local disclosure of in-process memory when a victim opens a specially crafted file. All currently-supported Office release lines on Windows - 365 Apps for Enterprise, Office 2019, 2021, 2024 LTSC, and Word 2016 standalone - are affected across both x86 and x64 architectures. No public exploit code has been identified, and SSVC rates exploitation as 'none' with technical impact 'partial', consistent with the moderate CVSS 5.5 rating.
Buffer over-read (CWE-126) in Microsoft Office Word allows local information disclosure when a user opens a specially crafted document, exposing process memory contents with high-confidentiality impact. Affected builds span Word 2016, Office 2019, Office LTSC 2021, Office LTSC 2024, and Microsoft 365 Apps for Enterprise across both x86 and x64 architectures. No public exploit has been identified at time of analysis, SSVC rates exploitation as none and the attack as non-automatable, and vendor patches are available for all affected product lines.
Uninitialized resource use (CWE-908) in Microsoft Excel allows a local attacker to disclose process memory contents when a user opens a specially crafted workbook. Affected products span Excel 2016 through Microsoft 365 Apps for Enterprise on both Windows and macOS, with vendor patches released across all Windows builds. No public exploit has been identified and SSVC rates exploitation as none with partial technical impact, placing real-world risk firmly in the moderate range despite the C:H CVSS metric.
Type confusion (CWE-843) in Microsoft Office Excel enables local information disclosure when a victim opens a specially crafted Excel file. Affected products span Excel 2016, Office 2019, Office LTSC 2021/2024, Microsoft 365 Apps for Enterprise, Office Online Server, and multiple Mac Office variants. The vulnerability carries a CVSS 5.5 with High confidentiality impact but no integrity or availability impact; no public exploit or active exploitation has been identified at time of analysis.
Out-of-bounds memory read in Microsoft Excel exposes potentially sensitive in-process memory contents when a user opens a specially crafted workbook. Affects a wide range of Office versions including Microsoft 365 Apps for Enterprise, Office 2016 through LTSC 2024, and Office for Mac editions. SSVC assessment rates exploitation as none with non-automatable attack delivery, and Microsoft has released patches addressing all affected branches. No public exploit or CISA KEV listing exists at time of analysis.
Buffer over-read (CWE-126) in Microsoft Office Excel allows a local attacker to disclose potentially sensitive process memory when a user opens a crafted Excel workbook. The flaw spans a broad range of Office versions from 2016 through LTSC 2024, including Microsoft 365 Apps for Enterprise and Mac variants, making the affected footprint very large. No public exploit code or CISA KEV listing has been identified; exploitation depends on social engineering to deliver a malicious file to the local system.
Out-of-bounds read in Microsoft Excel allows a local, unauthenticated attacker to disclose potentially sensitive memory contents by convincing a user to open a specially crafted workbook. Affected builds span Excel 2016 through Microsoft 365 Apps for Enterprise on both Windows and macOS. No public exploit code exists and CISA SSVC rates exploitation as 'none' with partial technical impact, making this a moderate-priority patch-cycle item rather than an urgent emergency.
Sensitive system information disclosure in Microsoft Excel allows a local, unauthenticated attacker to read high-confidentiality data when a victim opens a specially crafted spreadsheet. Affecting Office 2016 through LTSC 2024 on both Windows and Mac, the flaw (CWE-497) exposes internal system data - such as memory layout, environment variables, or path information - to an unauthorized control sphere during file parsing. No public exploit has been identified at time of analysis, and Microsoft has released patches across all affected product lines.
Out-of-bounds read in Microsoft Excel discloses sensitive memory contents when a victim opens a specially crafted Excel file. The vulnerability spans a wide range of affected versions including Excel 2016, Office 2019, LTSC 2021/2024, Office 365 for Mac, and Microsoft 365 Apps for Enterprise, making the patch surface broad across enterprise environments. No public exploit or active exploitation has been identified at time of analysis; vendor patch is available via MSRC.
Out-of-bounds read in Microsoft Excel across Office 2016 through 365 Apps for Enterprise permits a local, unauthenticated attacker to disclose sensitive memory contents when a victim opens a specially crafted spreadsheet file. The vulnerability carries a CVSS 5.5 score reflecting the local delivery requirement and confidentiality-only impact, with no integrity or availability consequences. No public exploit code or active exploitation has been identified at time of analysis, and vendor patches are available for all major Windows Office editions.
Uninitialized memory disclosure in Microsoft Excel exposes potentially sensitive heap or stack contents when a victim opens a crafted document, allowing an unauthenticated attacker to read process memory with high confidentiality impact. Affected product lines span Excel 2016 through Microsoft 365 Apps for Enterprise and multiple Mac variants, making this a broad-surface vulnerability. No public exploit code and no CISA KEV listing have been identified at time of analysis; SSVC assessment rates exploitation as 'none' with non-automatable delivery, limiting realistic risk to targeted document-delivery campaigns.
Out-of-bounds read in Microsoft Office Excel's file parser allows local information disclosure when a victim opens a specially crafted workbook. Affecting Excel 2016 through Microsoft 365 Apps for Enterprise, Office LTSC 2024, Office Online Server, and multiple macOS Office variants, the vulnerability (CWE-125) exposes process memory with high confidentiality impact but no integrity or availability consequences. Microsoft has released patched builds via MSRC; SSVC confirms no active exploitation and non-automatable delivery, placing this squarely within standard monthly patch-cycle priority.
Microsoft Office Excel exposes sensitive system information to an unauthorized control sphere (CWE-497), enabling local information disclosure when a victim opens a specially crafted Excel file. The vulnerability spans Excel 2016 through Microsoft 365 Apps for Enterprise and multiple LTSC editions on both Windows and Mac. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, though the C:H CVSS confidentiality rating indicates the quality or quantity of information that can be exfiltrated is significant.
Uninitialized resource use (CWE-908) in Microsoft Office exposes high-confidentiality data to remote unauthenticated attackers when a victim opens a specially crafted Office document. The vulnerability spans the full Microsoft Office ecosystem - Office 2016, 2019, LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and Mac variants - making the affected surface extremely broad. No public exploit code and no active exploitation have been identified at time of analysis; Microsoft has released patches across all affected product lines.
Out-of-bounds memory read in Microsoft Office Word discloses potentially sensitive process memory contents when a victim opens a specially crafted document, affecting Microsoft 365 Apps for Enterprise, Office 2019, Office 2021 LTSC, Office 2024 LTSC, Word 2016, and macOS editions across both Windows and macOS platforms. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) confirms this is a network-delivered, low-complexity information-disclosure flaw requiring user interaction but no attacker-side privileges. Vendor patch is confirmed available via Microsoft MSRC; no active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis.
Out-of-bounds read in Microsoft Office (CWE-125) allows a remote unauthenticated attacker to disclose sensitive memory contents when a victim opens a specially crafted document. Affected products span Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, Office 2016/2019, and their Mac counterparts - covering virtually the entire active Office install base. No public exploit code or active exploitation has been identified; SSVC rates the exploitation likelihood as none and technical impact as partial, consistent with the 6.5 CVSS base score.
Out-of-bounds read in Microsoft Word across Office 2016 through Microsoft 365 Apps enables an unauthenticated remote attacker to disclose sensitive memory contents when a user opens a crafted document. The vulnerability (CWE-125) affects both Windows (x86/x64) and macOS deployments of the Office suite across multiple release tracks - retail, LTSC, and subscription. No public exploit or active exploitation has been identified at time of analysis, though the broad install base and socially-engineered document delivery make this a realistic phishing vector.
Heap-based buffer overflow in Microsoft Office leaks sensitive memory contents to unauthenticated network attackers when a victim opens a specially crafted document. Affected products span Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise on both Windows and macOS, making the exposure surface extremely broad. Vendor-released patches are available; no public exploit or CISA KEV listing has been identified at time of analysis, but the low-complexity, no-privilege vector warrants prompt patching across enterprise fleets.
Out-of-bounds memory read in Microsoft PowerPoint's file-parsing logic exposes sensitive process memory when a victim opens a specially crafted presentation file, allowing a remote unauthenticated attacker to disclose heap or stack contents. Affected builds span Microsoft 365 Apps for Enterprise, Office 2019, Office LTSC 2021, and Office LTSC 2024 on both Windows and macOS platforms. Microsoft has released patched builds via the MSRC advisory; no public exploit identified at time of analysis.
Out-of-bounds read (CWE-125) in Microsoft Office Outlook allows a remote unauthenticated attacker to leak process memory contents when a victim opens or previews a crafted email message or attachment. All major Office branches are affected - Office 2016, 2019, LTSC 2021, LTSC 2024, and Microsoft 365 Apps for Enterprise - spanning hundreds of millions of endpoints globally. Microsoft has released patches across all affected branches; no public exploit code exists and CISA SSVC rates exploitation as 'none' at the time of analysis.
Out-of-bounds read in Microsoft Office exposes sensitive memory contents to a remote, unauthenticated attacker who can convince a user to open a crafted document. The flaw (CWE-125) affects the full current Office portfolio - Office 2019, LTSC 2021, LTSC 2024, Microsoft 365 Apps for Enterprise, and their macOS counterparts - with high confidentiality impact and no integrity or availability consequence. No public exploit identified at time of analysis; vendor-released patches are available for all Windows versions with specific build thresholds.
Out-of-bounds read in Microsoft Office Word's document parser allows a remote unauthenticated attacker to disclose sensitive memory contents when a victim opens a crafted Word file. Affecting Word 2016, Office 2019/2021/2024 LTSC, and Microsoft 365 Apps for Enterprise across both x86 and x64 builds, the vulnerability carries a CVSS 6.5 with C:H but no integrity or availability impact. No public exploit or CISA KEV listing exists at time of analysis; SSVC rates exploitation as none and the attack as not automatable, moderating operational urgency despite the broad product footprint.
Out-of-bounds read in multiple Microsoft Office SKUs allows a remote unauthenticated attacker to disclose in-process memory contents by inducing a user to open a specially crafted document. Affected builds span Microsoft 365 Apps for Enterprise, Office 2019/2021/2024 LTSC on Windows, and multiple Mac variants. Exploitation yields high confidentiality impact with no integrity or availability consequence; no public exploit code or active exploitation has been identified at time of analysis.
Out-of-bounds read in Microsoft Office exposes arbitrary memory contents to a remote unauthenticated attacker who can convince a user to open a malicious file, resulting in high-confidence information disclosure. Affected versions span Microsoft Office 2019, LTSC 2021, LTSC 2024, Microsoft 365 Apps for Enterprise, and their macOS equivalents. No public exploit code has been identified and this vulnerability is not listed in CISA KEV at time of analysis, though the phishing-file delivery model is a well-established Office exploitation pattern.
Out-of-bounds read in Microsoft Office Outlook allows a remote, unauthenticated attacker to disclose sensitive information from process memory by inducing a user to open or interact with a maliciously crafted email or document. Affected products span Outlook 2016 through Microsoft 365 Apps for Enterprise, covering a large portion of the enterprise desktop install base. No public exploit code and no CISA KEV listing have been identified at time of analysis; Microsoft has released patches across all affected product lines via MSRC.
Out-of-bounds read in Microsoft Office Word allows an unauthenticated remote attacker to disclose memory contents when a victim opens a specially crafted document, affecting Word 2016 through Microsoft 365 Apps for Enterprise and Office LTSC 2024 on both x86 and x64 platforms. The flaw (CWE-125) resides in Word's document parser and can expose heap or stack memory to the attacker-controlled document, but is limited strictly to confidentiality impact - no code execution or integrity violation is possible from this flaw alone. Vendor-released patches are available across all affected product lines; no active exploitation has been identified and no public exploit code is known at time of analysis.
Out-of-bounds read in Microsoft Office Outlook and closely related Office suite components exposes sensitive in-memory data to network-based attackers who can deliver a crafted document to a user. The CVSS vector (C:H/I:N/A:N) and CWE-125 (Out-of-bounds Read) align on an information-disclosure primary impact, while Microsoft's description references code execution - a material discrepancy that warrants verification against the full MSRC advisory. Patches are available from Microsoft across all affected product lines including Office 2016 through 2024 LTSC and Microsoft 365 Apps on both Windows and macOS; no public exploit code and no CISA KEV listing have been identified at time of analysis.
Out-of-bounds read in Microsoft Excel enables an unauthenticated remote attacker to disclose sensitive memory contents when a victim opens a crafted Excel file. The vulnerability spans a broad range of Office product lines - including Office 2016, 2019, 2021 LTSC, 2024 LTSC, Microsoft 365 Apps for Enterprise, and Mac variants - making the exposure surface wide. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; a vendor patch is available via Microsoft's update guide.
Out-of-bounds read in Microsoft Office PowerPoint exposes process memory contents to a local attacker when a victim opens a specially crafted presentation file. Affected across a wide range of Office versions - PowerPoint 2016, Office 2019, LTSC 2021, LTSC 2024, Office 365/Microsoft 365 Apps for Enterprise on both Windows and Mac platforms. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; vendor patch is available.
Improper null termination (CWE-170) in Microsoft Office Word's document-processing pipeline allows a local attacker to read beyond a string buffer boundary, disclosing sensitive in-memory data when a victim opens a crafted document. Affected products span Microsoft 365 Apps for Enterprise, Office 2019/2021/2024 LTSC, Word 2016, and Mac variants across Windows (x64/x86) and macOS. No active exploitation is confirmed (SSVC Exploitation: none; no KEV listing), and Microsoft has released fixed builds across all affected product lines.
Out-of-bounds read in Microsoft Office Word enables remote attackers to disclose high-value in-process memory contents by convincing a user to open a specially crafted document. Affecting Microsoft 365 Apps for Enterprise, Word 2016, Office 2019/2021/2024 LTSC on Windows (x86/x64) and Office for Mac editions, this CWE-125 flaw requires no attacker authentication but does require victim interaction. No public exploit has been identified at time of analysis, and CISA SSVC rates exploitation as none with non-automatable delivery, consistent with the phishing/social-engineering delivery model implied by the UI:R CVSS metric.
Out-of-bounds read (CWE-125) in Microsoft Word's document-parsing engine enables remote information disclosure across Microsoft 365 Apps, Office 2019, 2021, and 2024 LTSC on both Windows and macOS. An unauthenticated remote attacker (per CVSS PR:N) can cause Word to read beyond an allocated buffer when a victim opens a crafted document, potentially leaking sensitive memory contents to an attacker-controlled endpoint. No public exploit code or active exploitation has been identified at time of analysis; SSVC rates the attack as non-automatable with partial technical impact, placing this squarely in routine patch-cycle response rather than emergency remediation.
Out-of-bounds memory read in Microsoft Office Word's document parser exposes sensitive process memory to remote attackers when a victim opens a specially crafted Word file. The flaw spans Word 2016 through Office LTSC 2024 and Microsoft 365 Apps on both Windows (x86/x64) and macOS. SSVC assessment confirms no known active exploitation and the attack is not automatable, placing real-world priority below the CVSS 6.5 headline score suggests.
Out-of-bounds read in Microsoft Office PowerPoint exposes memory contents to remote attackers when a victim opens a specially crafted PowerPoint file. Affected products span PowerPoint 2016 through Microsoft 365 Apps for Enterprise across Windows and Mac. No public exploit code has been identified and SSVC classifies exploitation as none and not automatable, consistent with the user-interaction requirement that prevents mass exploitation.
Out-of-bounds read in Microsoft Word across Office 2016, 2019, 2021 LTSC, 2024 LTSC, and Microsoft 365 Apps for Enterprise on both Windows and macOS allows a locally authenticated, low-privileged user to disclose adjacent process memory by opening a specially crafted document. The flaw carries a High confidentiality impact with no integrity or availability effects, and requires user interaction to trigger. No public exploit code or active exploitation has been identified at time of analysis; CISA SSVC rates exploitation status as none and automation as infeasible.
Out-of-bounds read (CWE-125) in Microsoft PowerPoint exposes memory contents to remote unauthenticated attackers who can convince a user to open a specially crafted presentation file. All major Office release channels are affected, including Microsoft 365 Apps for Enterprise, Office 2019, PowerPoint 2016, Office LTSC 2021, and Office LTSC 2024, on both Windows and Mac platforms. No public exploit or active exploitation has been confirmed; SSVC assessment rates exploitation as none and technical impact as partial, consistent with a CVSS 6.5 medium-severity information disclosure finding.
Buffer over-read (CWE-126) in Microsoft Office Excel's file parsing engine allows remote information disclosure when a user opens a crafted spreadsheet file. Affected versions span Office 2016 through Office 2024 LTSC and Microsoft 365 Apps for Enterprise across Windows and Mac platforms, with fixed builds confirmed for Windows variants per EUVD-2026-73733. No public exploit code has been identified at time of analysis, and SSVC rates current exploitation as none with partial technical impact, consistent with the absence of a CISA KEV listing.
Untrusted pointer dereference in Microsoft Office PowerPoint exposes high-confidentiality memory contents to a remote, unauthenticated attacker who can convince a user to open a specially crafted presentation file. The flaw (CWE-822) allows the application to dereference a pointer sourced from untrusted file data without validation, enabling out-of-bounds or arbitrary memory reads that leak sensitive process memory over a network context. No public exploit code or CISA KEV listing is present at time of analysis, but the high-confidentiality CVSS rating and broad install base across all current Office versions make patch deployment a priority.
Type confusion (CWE-822) in Microsoft Office PowerPoint allows a remote unauthenticated attacker to disclose sensitive information from a victim's system by inducing them to open a specially crafted presentation file. The vulnerability spans Microsoft 365 Apps for Enterprise, Office LTSC 2021 and 2024, Office 2019, and Mac variants of Office across multiple release channels. Vendor-released patches are available for Windows editions with specific fixed build numbers; no public exploit has been identified at time of analysis.
Integer overflow in Microsoft Office Word's document parsing engine triggers an out-of-bounds read (CWE-125), enabling a remote unauthenticated attacker to disclose potentially sensitive memory contents by inducing a victim to open a specially crafted document. Affected products span Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise on both Windows and macOS. Microsoft has released patches across all affected versions; no confirmed active exploitation or public exploit code has been identified at time of analysis.
Buffer over-read (CWE-126) in Microsoft Office Word exposes sensitive process memory to a remote unauthenticated attacker who can deliver a maliciously crafted Word document and trick a user into opening it. The flaw affects a broad range of Microsoft Office products - Microsoft 365 Apps for Enterprise, Office 2019/2021/2024 LTSC, and Word 2016 - across both Windows (x86/x64) and macOS platforms. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-supplied patches have been released addressing specific build versions across all affected product lines.
Buffer over-read (CWE-126) in Microsoft Office exposes process memory contents to remote unauthenticated attackers when a victim opens a maliciously crafted Office document. The vulnerability spans a wide range of Office product lines across both Windows and macOS - including Office 2016, 2019, LTSC 2021/2024, Microsoft 365 Apps for Enterprise, and the macOS Office 365/LTSC equivalents. No public exploit code has been identified and the CVE does not appear in the CISA KEV catalog at time of analysis; a vendor patch has been released across all affected product lines.
Insufficiently protected credential transmission in Microsoft Office exposes NTLM or equivalent credential material to a network-adjacent attacker via a crafted document or resource link. Affected versions span the entire active Office portfolio - Office 2016 through LTSC 2024 and Microsoft 365 Apps for Enterprise - making the exposure broadly relevant. An unauthenticated remote attacker who can induce a user to open a specially crafted Office file or embedded resource can capture credential hashes suitable for relay or offline cracking, constituting a practical spoofing primitive. No public exploit code or CISA KEV listing has been identified at the time of analysis, though Microsoft has released patches.
Out-of-bounds read in Microsoft Office Excel enables remote information disclosure when a user opens a specially crafted spreadsheet. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) confirms that an unauthenticated network-based attacker can trigger the flaw, but only after social engineering a victim into opening a malicious file. No public exploit code and no CISA KEV listing have been identified at time of analysis; Microsoft has released patches across all affected Office product lines.
Out-of-bounds read in Microsoft Excel exposes sensitive memory contents over a network to unauthenticated remote attackers, resulting in high-confidence information disclosure (C:H). Exploitation requires user interaction - specifically, opening a crafted Excel document - placing this firmly in the phishing/malicious-attachment delivery class. No active exploitation has been confirmed (not listed in CISA KEV), and no public exploit code has been identified at the time of analysis, though the patch is available and should be applied promptly given the ubiquity of the affected product across enterprise environments.
Information disclosure in Microsoft Office PowerPoint enables a local attacker to obtain sensitive data from a victim's system by exploiting improper input validation (CWE-20) when processing a malicious file. Affected products span Windows and Mac editions including Office 2019, Microsoft 365 Apps for Enterprise, LTSC 2021/2024, and Office 365 for Mac - all requiring the victim to open a crafted PowerPoint file (UI:R). No active exploitation has been confirmed by CISA KEV, and no public exploit code has been identified at time of analysis; however, a vendor patch is available.