Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

microsoft_365

Source -

NVD

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

15
Related CVEsRelated VendorsRelated AssignersReports
15Vulnerabilities found

CVE-2026-45459
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-3.3||LOW
EPSS-0.06% / 18.20%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:05
Updated-11 Jun, 2026 | 18:38
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Excel Security Feature Bypass Vulnerability

Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-365_appsoffice_2024microsoft_365office_2021Microsoft Office LTSC for Mac 2021Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024
CWE ID-CWE-693
Protection Mechanism Failure
CVE-2026-45457
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-7.8||HIGH
EPSS-0.08% / 23.62%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:05
Updated-11 Jun, 2026 | 18:38
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Word Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-365_appsoffice_2024microsoft_365office_2021Microsoft Office LTSC for Mac 2021Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC for Mac 2024
CWE ID-CWE-125
Out-of-bounds Read
CVE-2026-44822
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-8.2||HIGH
EPSS-0.08% / 23.47%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:05
Updated-11 Jun, 2026 | 18:38
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Action-Not Available
Vendor-Microsoft Corporation
Product-exceloffice_2019microsoft_365office_2024365_appsoffice_online_serveroffice_2021Microsoft Office LTSC for Mac 2021Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024Microsoft Office LTSC 2021Microsoft Office 2019Office Online ServerMicrosoft Excel 2016
CWE ID-CWE-125
Out-of-bounds Read
CVE-2026-45643
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-7.8||HIGH
EPSS-0.08% / 23.62%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:04
Updated-11 Jun, 2026 | 18:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Word Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-365_appsoffice_2024microsoft_365office_2021Microsoft Office LTSC for Mac 2021Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024Microsoft Office LTSC 2021
CWE ID-CWE-822
Untrusted Pointer Dereference
CVE-2026-45458
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-8.4||HIGH
EPSS-0.06% / 19.24%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:04
Updated-11 Jun, 2026 | 15:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Outlook and Word Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-sharepoint_serverwordoffice_2019microsoft_365office_2024365_appsoffice_2021Microsoft Office LTSC for Mac 2021Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server 2019Microsoft Office LTSC 2021Microsoft SharePoint Enterprise Server 2016Microsoft Office 2019Microsoft Word 2016
CWE ID-CWE-416
Use After Free
CVE-2026-45456
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-8.4||HIGH
EPSS-0.15% / 35.50%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:04
Updated-11 Jun, 2026 | 18:40
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Outlook and Word Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-office_2016sharepoint_serveroffice_2019microsoft_365office_2024365_appsoffice_2021Microsoft Office LTSC for Mac 2021Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server 2019Microsoft Office LTSC 2021Microsoft SharePoint Enterprise Server 2016Microsoft Office 2019Microsoft Word 2016
CWE ID-CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
CVE-2026-44824
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-7.8||HIGH
EPSS-0.08% / 23.62%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:04
Updated-11 Jun, 2026 | 18:40
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-office_2016sharepoint_serveroffice_2019microsoft_365office_2024365_appsoffice_2021Microsoft Office LTSC for Mac 2021Microsoft Office 2016Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server 2019Microsoft Office LTSC 2021Microsoft SharePoint Enterprise Server 2016Microsoft Office 2019
CWE ID-CWE-122
Heap-based Buffer Overflow
CVE-2026-44821
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-5.5||MEDIUM
EPSS-0.06% / 18.71%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:04
Updated-11 Jun, 2026 | 18:40
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-office_2016sharepoint_serveroffice_2019microsoft_365office_2024365_appsoffice_2021Microsoft Office LTSC for Mac 2021Microsoft Office 2016Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server 2019Microsoft Office LTSC 2021Microsoft SharePoint Enterprise Server 2016Microsoft Office 2019
CWE ID-CWE-125
Out-of-bounds Read
CVE-2026-44820
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-7.8||HIGH
EPSS-0.08% / 23.62%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:04
Updated-11 Jun, 2026 | 18:38
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Excel Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-exceloffice_2019microsoft_365office_2024365_appsoffice_online_serveroffice_2021Microsoft Office LTSC for Mac 2021Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024Microsoft Office LTSC 2021Microsoft Office 2019Office Online ServerMicrosoft Excel 2016
CWE ID-CWE-125
Out-of-bounds Read
CVE-2026-44819
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-7.8||HIGH
EPSS-0.08% / 23.62%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:04
Updated-11 Jun, 2026 | 18:39
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-office_2016sharepoint_serveroffice_2019microsoft_365office_2024365_appsoffice_2021Microsoft Office LTSC for Mac 2021Microsoft Office 2016Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server 2019Microsoft Office LTSC 2021Microsoft SharePoint Enterprise Server 2016Microsoft Office 2019
CWE ID-CWE-122
Heap-based Buffer Overflow
CVE-2026-44818
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-7||HIGH
EPSS-0.04% / 12.88%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:04
Updated-11 Jun, 2026 | 18:38
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Excel Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-exceloffice_2019microsoft_365office_2024365_appsoffice_online_serveroffice_2021Microsoft Office LTSC for Mac 2021Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024Microsoft Office LTSC 2021Microsoft Office 2019Office Online ServerMicrosoft Excel 2016
CWE ID-CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-44817
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-7.8||HIGH
EPSS-0.15% / 35.35%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:04
Updated-11 Jun, 2026 | 18:38
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Excel Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-exceloffice_2019microsoft_365office_2024365_appsoffice_online_serveroffice_2021Microsoft Office LTSC for Mac 2021Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024Microsoft Office LTSC 2021Microsoft Office 2019Office Online ServerMicrosoft Excel 2016
CWE ID-CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
CVE-2026-45485
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-3.3||LOW
EPSS-0.05% / 17.29%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:04
Updated-11 Jun, 2026 | 18:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-office_2016sharepoint_serveroffice_2019microsoft_365office_2024365_appsoffice_2021Microsoft Office LTSC for Mac 2021Microsoft Office 2016Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024Microsoft SharePoint Server Subscription EditionMicrosoft SharePoint Server 2019Microsoft Office LTSC 2021Microsoft SharePoint Enterprise Server 2016Microsoft Office 2019
CWE ID-CWE-125
Out-of-bounds Read
CVE-2026-45486
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-7.8||HIGH
EPSS-0.08% / 23.62%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:04
Updated-11 Jun, 2026 | 18:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Word Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-365_appsoffice_2024microsoft_365office_2021Microsoft Office LTSC for Mac 2021Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC for Mac 2024
CWE ID-CWE-416
Use After Free
CVE-2026-45469
Assigner-Microsoft Corporation
ShareView Details
Assigner-Microsoft Corporation
CVSS Score-7.8||HIGH
EPSS-0.10% / 27.40%
||
7 Day CHG~0.00%
Published-09 Jun, 2026 | 17:04
Updated-11 Jun, 2026 | 18:37
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Microsoft Excel Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Action-Not Available
Vendor-Microsoft Corporation
Product-exceloffice_2019microsoft_365office_2024365_appsoffice_online_serveroffice_2021Microsoft Office LTSC for Mac 2021Microsoft 365 Apps for EnterpriseMicrosoft Office 365 for MacMicrosoft Office LTSC 2024Microsoft Office LTSC for Mac 2024Microsoft Office LTSC 2021Microsoft Office 2019Office Online ServerMicrosoft Excel 2016
CWE ID-CWE-122
Heap-based Buffer Overflow
CWE ID-CWE-191
Integer Underflow (Wrap or Wraparound)