DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Office Produkte: Mehrere Schwachstellen
view advisory published 2026-08-11
Ein Angreifer kann mehrere Schwachstellen in Microsoft Office Produkte ausnutzen, um Dateien zu manipulieren, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode auszuführen.
01
describes (123)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-70105US | high7.5 | — | ||
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-65680US | — | — | ||
Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-70355US | high8.7 | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a netwo… | ||||
| CVE-2026-70329US | — | — | ||
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-70328US | — | — | ||
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-70327US | — | — | ||
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-70326US | — | — | ||
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-70325US | medium5.5 | — | ||
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-70324US | — | — | ||
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-70323US | medium5.5 | — | ||
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-70322US | medium5.5 | — | ||
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-70321US | — | — | ||
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-70320US | medium5.5 | — | ||
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-70319US | medium5.5 | — | ||
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-70318US | — | — | ||
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-70317US | medium5.5 | — | ||
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-70316US | medium5.5 | — | ||
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-70315US | medium5.5 | — | ||
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-70314US | — | — | ||
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-70313US | — | — | ||
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. | ||||
showing 20 of 123
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:54432 vom 2026-08-12external
- PoC CVE-2026-65660external
- Microsoft Leitfaden für Sicherheitsupdatesexternal
- Microsoft Security Advisory CVE-2026-50515external
- Microsoft Security Advisory CVE-2026-57105external
- Microsoft Security Advisory CVE-2026-58639external
- Microsoft Security Advisory CVE-2026-58651external
- Microsoft Security Advisory CVE-2026-62827external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan