CERTFR-2026-AVI-1331

vendorFRcertfr

FrançaisIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.

Multiples vulnérabilités dans Microsoft Office

Advisory ansehen veröffentlicht 2026-10-16

Eine veröffentlichte Sicherheitsmeldung; die Schwachstellen unten werden von ihr beschrieben.

01

beschreibt (29)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2026-108455USmedium6.5—
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108454USmedium6.5—
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108453USmedium6.5—
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-108451UShigh8.8—
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108450UShigh8.8—
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108449UShigh8.8—
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108448UShigh7.5—
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-108447UShigh8.8—
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108446UShigh8.8—
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-108445UShigh8.8—
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108444UShigh8.8—
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-108443UShigh8.8—
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108442UShigh8.8—
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108441UShigh8.8—
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108440UShigh8.8—
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108439UShigh8.8—
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108438USmedium6.5—
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108437UShigh8.8—
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108436USmedium6.5—
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108435USmedium6.5—
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
20 von 29 angezeigt
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan