CVE-2026-78518 Microsoft
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVSS 8.8
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +13 more
Updated September 17, 2026
CVE-2026-78521 Microsoft
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 8.8
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +11 more
Updated September 17, 2026
CVE-2026-80076 Microsoft
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +9 more
Updated September 17, 2026
CVE-2026-80078 Microsoft
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +9 more
Updated September 17, 2026
CVE-2026-80080 Microsoft
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 8.8
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +11 more
Updated September 17, 2026
CVE-2026-80082 Microsoft
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +9 more
Updated September 17, 2026
CVE-2026-80085 Microsoft
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 8.8
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +11 more
Updated September 17, 2026
CVE-2026-80086 Microsoft
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +9 more
Updated September 17, 2026
CVE-2026-80087 Microsoft
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +11 more
Updated September 17, 2026
CVE-2026-80088 Microsoft
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +11 more
Updated September 17, 2026
CVE-2026-80089 Microsoft
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +11 more
Updated September 17, 2026
CVE-2026-80090 Microsoft
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +11 more
Updated September 17, 2026
CVE-2026-80091 Microsoft
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVSS 6.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +11 more
Updated September 17, 2026
CVE-2026-81386 Microsoft
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 7.8
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +13 more
Updated September 17, 2026
CVE-2026-81387 Microsoft
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 5.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +13 more
Updated September 17, 2026
CVE-2026-81388 Microsoft
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 7.8
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +13 more
Updated September 17, 2026
CVE-2026-81389 Microsoft
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 7.0
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +13 more
Updated September 17, 2026
CVE-2026-81390 Microsoft
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 5.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +14 more
Updated September 17, 2026
CVE-2026-81391 Microsoft
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 5.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +13 more
Updated September 17, 2026
CVE-2026-81392 Microsoft
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 5.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +13 more
Updated September 17, 2026
CVE-2026-81393 Microsoft
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 5.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +13 more
Updated September 17, 2026
CVE-2026-81394 Microsoft
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 5.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +13 more
Updated September 17, 2026
CVE-2026-81395 Microsoft
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 5.5
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +13 more
Updated September 17, 2026
CVE-2026-81396 Microsoft
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS 7.8
Update availability Security update available Affected: Microsoft 365 Apps for Enterprise for 32-bit Systems · Microsoft 365 Apps for Enterprise for 64-bit Systems · +13 more
Updated September 17, 2026