CERTFR-2026-AVI-1312

vendorFRcertfr

FrançaisIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.

Multiples vulnérabilités dans Microsoft Office

Advisory ansehen veröffentlicht 2026-10-14

Eine veröffentlichte Sicherheitsmeldung; die Schwachstellen unten werden von ihr beschrieben.

01

beschreibt (139)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2026-102855UShigh8.8—
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
CVE-2026-97781UShigh8.8—
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
CVE-2026-97780UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97779USmedium6.5—
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-97778UShigh8.8—
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97777UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97776UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97775UShigh8.8—
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97774UShigh7.0—
Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-97773UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97772UShigh8.8—
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97771UShigh8.8—
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97770UShigh8.8—
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97769UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97768UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97767UShigh8.8—
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97766UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97765UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97763UShigh8.8—
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-97762UShigh8.8—
Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
20 von 139 angezeigt
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan