DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Advisory ansehen veröffentlicht 2026-10-13
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Office Produkten ausnutzen, um seine Privilegien zu erhöhen, um Code auszuführen, um Informationen offenzulegen oder zu manipulieren und um Sicherheitsmechanismen zu umgehen.
01
beschreibt (212)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-108455US | medium6.5 | — | ||
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-108454US | medium6.5 | — | ||
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-108453US | medium6.5 | — | ||
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-108452US | high8.8 | — | ||
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-108451US | high8.8 | — | ||
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108450US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108449US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108448US | high7.5 | — | ||
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108447US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108446US | high8.8 | — | ||
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108445US | high8.8 | — | ||
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108444US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108443US | high8.8 | — | ||
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108442US | high8.8 | — | ||
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108441US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108440US | high8.8 | — | ||
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108439US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108438US | medium6.5 | — | ||
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-108437US | high8.8 | — | ||
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-108436US | medium6.5 | — | ||
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | ||||
20 von 212 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Microsoft Leitfaden für Sicherheitsupdatesexternal
- Microsoft Security Advisory CVE-2026-100209external
- Microsoft Security Advisory CVE-2026-100210external
- Microsoft Security Advisory CVE-2026-100211external
- Microsoft Security Advisory CVE-2026-100212external
- Microsoft Security Advisory CVE-2026-102849external
- Microsoft Security Advisory CVE-2026-102850external
- Microsoft Security Advisory CVE-2026-102855external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan