NCSC-2026-0286

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Microsoft Office

view advisory published 2026-08-11

Microsoft heeft kwetsbaarheden verholpen in diverse Office producten.

01

describes (128)

Related CVEs.

IDseverity exploitable
CVE-2026-65680US——
Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.
CVE-2026-70355UShigh8.7—
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a netwo…
CVE-2026-70329US——
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70328US——
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70327US——
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70326US——
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70325USmedium5.5—
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70324US——
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70323USmedium5.5—
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70322USmedium5.5—
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70321US——
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70320USmedium5.5—
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70319USmedium5.5—
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70318US——
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-70317USmedium5.5—
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70316USmedium5.5—
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70315USmedium5.5—
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70314US——
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70313US——
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70312USmedium5.5—
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
showing 20 of 128
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan