DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
view advisory published 2026-10-13
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Office Produkten ausnutzen, um seine Privilegien zu erhöhen, um Code auszuführen, um Informationen offenzulegen oder zu manipulieren und um Sicherheitsmechanismen zu umgehen.
01
describes (212)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-108455US | medium6.5 | — | ||
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-108454US | medium6.5 | — | ||
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-108453US | medium6.5 | — | ||
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-108452US | high8.8 | — | ||
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-108451US | high8.8 | — | ||
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108450US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108449US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108448US | high7.5 | — | ||
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108447US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108446US | high8.8 | — | ||
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108445US | high8.8 | — | ||
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108444US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108443US | high8.8 | — | ||
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108442US | high8.8 | — | ||
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108441US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108440US | high8.8 | — | ||
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108439US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108438US | medium6.5 | — | ||
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-108437US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108436US | medium6.5 | — | ||
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | ||||
showing 20 of 212
02
references
External citations — patches, advisories, analysis.
- Microsoft Leitfaden für Sicherheitsupdatesexternal
- Microsoft Security Advisory CVE-2026-100209external
- Microsoft Security Advisory CVE-2026-100210external
- Microsoft Security Advisory CVE-2026-100211external
- Microsoft Security Advisory CVE-2026-100212external
- Microsoft Security Advisory CVE-2026-102849external
- Microsoft Security Advisory CVE-2026-102850external
- Microsoft Security Advisory CVE-2026-102855external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan