Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-97741 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97740 | medium | 6.5 | No | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disc... | 2026-10-15 |
| CVE-2026-97739 | high | 8.8 | No | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97738 | high | 8.8 | No | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97017 | high | 8.8 | No | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97011 | high | 8.8 | No | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97010 | high | 8.8 | No | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97008 | high | 8.8 | No | Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97007 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97005 | medium | 5.5 | No | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | 2026-10-15 |
| CVE-2026-97004 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97003 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97001 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 2026-10-15 |
| CVE-2026-96997 | high | 7.8 | No | Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally. | 2026-10-15 |
| CVE-2026-96995 | high | 7.8 | No | Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. | 2026-10-15 |
| CVE-2026-88210 | high | 7.8 | No | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature lo... | 2026-10-15 |
| CVE-2026-88207 | high | 7.5 | No | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-88202 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-88197 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-88196 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | 2026-10-15 |