Skip to content
Threat Feed
Subscribe

Tag

Microsoft Office

9 briefs RSS
high advisory

Detection of Microsoft Office Protected View Disablement

Adversaries modify registry keys to disable Microsoft Office Protected View security controls, facilitating the execution of malicious documents.

Microsoft Office defense-impairment registry-tampering microsoft-office persistence privilege-escalation registry windows office
2r 1t updated
high threat

Multiple Vulnerabilities in Microsoft Office Products (June 2026)

CERT-FR has disclosed 31 vulnerabilities in various Microsoft Office products, including CVE-2026-44803 and CVE-2026-47635, which could allow remote code execution, privilege escalation, and data confidentiality compromise.

exploited Microsoft 365 Apps pour Enterprise pour systèmes 32 bits +21 vulnerability microsoft-office remote-code-execution privilege-escalation data-confidentiality windows macos android
3r 4t 5c
medium advisory

CVE-2026-42832 - Microsoft Office Improper Access Control Vulnerability Leading to Spoofing

CVE-2026-42832 is an improper access control vulnerability in Microsoft Office that allows an unauthorized attacker to perform local spoofing.

Office cve-2026-42832 spoofing microsoft-office access-control
2r 2t 1c
high advisory

CVE-2026-42831 Heap-based Buffer Overflow in Microsoft Office

CVE-2026-42831 is a heap-based buffer overflow vulnerability in Microsoft Office, allowing a local attacker to execute arbitrary code with a CVSS score of 7.8.

Office cve heap overflow microsoft office code execution
1r 1t 1c
high threat

CVE-2026-40419: Microsoft Office Use-After-Free Vulnerability for Local Privilege Escalation

CVE-2026-40419 is a use-after-free vulnerability in Microsoft Office that allows an authenticated, local attacker to elevate privileges.

Office use-after-free privilege-escalation microsoft-office
2r 1t 1c
high threat

CVE-2026-40363: Microsoft Office Heap-based Buffer Overflow

A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthenticated, local attacker to execute arbitrary code.

Office heap-based buffer overflow code execution microsoft office cve-2026-40363
2r 1t 1c
high advisory

CVE-2026-40358 Use-After-Free Vulnerability in Microsoft Office

CVE-2026-40358 describes a use-after-free vulnerability in Microsoft Office that could allow an unauthorized local attacker to execute code with elevated privileges.

Office cve use-after-free microsoft office code execution
2r 2t 1c
high threat

Microsoft Office Word Use-After-Free Vulnerability (CVE-2026-33095)

A use-after-free vulnerability in Microsoft Office Word (CVE-2026-33095) could allow a local attacker to execute arbitrary code by opening a specially crafted document.

exploited cve-2026-33095 use-after-free microsoft-office word code-execution
2r 1t 1c
critical advisory

Microsoft Office Use-After-Free Vulnerability CVE-2026-32190

CVE-2026-32190 is a use-after-free vulnerability in Microsoft Office that allows an unauthorized attacker to execute code locally.

Microsoft Office +3 use-after-free microsoft-office code-execution cve-2026-32190
2r 3t 1c