NCSC-2026-0116

csafNLncsc_nl

NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.

Kwetsbaarheden verholpen in Microsoft Office

Advisory ansehen veröffentlicht 2026-04-14

Microsoft heeft kwetsbaarheden verholpen in diverse Office producten.

01

beschreibt (14)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2026-33822US——
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-33115US——
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-33114US——
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-33095US——
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-32201USmedium6.5OT kritischKEV
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-32200US——
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVE-2026-32199US——
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32198US——
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32197US——
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32190US——
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-32189US——
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-32188US——
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-23657US——
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-20945USmedium5.4—
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network…
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan