CERTFR-2026-AVI-1312

vendorFRcertfr

FrançaisShown in its original language — a full translation is planned for a future version.

Multiples vulnérabilités dans Microsoft Office

view advisory published 2026-10-14

A published security advisory; the vulnerabilities below are the ones it describes.

01

describes (139)

Related CVEs.

IDseverity exploitable
CVE-2026-102855UShigh8.8—
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
CVE-2026-97781UShigh8.8—
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
CVE-2026-97780UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97779USmedium6.5—
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97778UShigh8.8—
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97777UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97776UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97775UShigh8.8—
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97774UShigh7.0—
Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-97773UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97772UShigh8.8—
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97771UShigh8.8—
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97770UShigh8.8—
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97769UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97768UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97767UShigh8.8—
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97766UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97765UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97763UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97762UShigh8.8—
Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
showing 20 of 139
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan