NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Microsoft Office
view advisory published 2026-09-08
Microsoft heeft 114 kwetsbaarheden verholpen in diverse Office producten.
01
describes (114)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-69646US | high8.3 | — | ||
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network. | ||||
| CVE-2026-69642US | medium6.1 | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-66308US | medium6.5 | — | ||
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network. | ||||
| CVE-2026-66307US | — | — | ||
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-66306US | medium6.5 | — | ||
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-66305US | high7.1 | — | ||
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network. | ||||
| CVE-2026-66304US | — | — | ||
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-66303US | medium6.5 | — | ||
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network. | ||||
| CVE-2026-66302US | critical9.8 | — | ||
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-63523US | medium6.1 | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-81960US | high7.8 | — | ||
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-81959US | high7.8 | — | ||
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-81958US | medium5.5 | — | ||
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | ||||
| CVE-2026-81957US | high7.8 | — | ||
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-81956US | high7.8 | — | ||
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-81955US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-81954US | high7.8 | — | ||
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-81953US | high7.8 | — | ||
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-81952US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-81951US | high7.8 | — | ||
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||||
showing 20 of 114
02
references
External citations — patches, advisories, analysis.
- Referenceexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan