Multiple vulnerabilities in Microsoft Office

Descrição

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
3. An information disclosure vulnerability in Microsoft Excel can be exploited remotely to obtain sensitive information.
4. An elevation of privilege vulnerability in Windows GDI can be exploited remotely to gain privileges.
5. A remote code execution vulnerability in Microsoft SharePoint can be exploited remotely to execute arbitrary code.
6. An information disclosure vulnerability in Microsoft Office can be exploited remotely to obtain sensitive information.
7. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
8. A remote code execution vulnerability in Microsoft Word can be exploited remotely to execute arbitrary code.
9. A security feature bypass vulnerability in Microsoft SharePoint Server can be exploited remotely to bypass security restrictions.
10. A remote code execution vulnerability in Microsoft PowerPoint can be exploited remotely to execute arbitrary code.
11. An information disclosure vulnerability in Microsoft Word can be exploited remotely to obtain sensitive information.
12. An information disclosure vulnerability in Microsoft SharePoint Server can be exploited remotely to obtain sensitive information.
13. An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely to gain privileges.
14. An information disclosure vulnerability in Microsoft Word can be exploited remotely to execute arbitrary code.
15. A remote code execution vulnerability in Microsoft OneNote can be exploited remotely to execute arbitrary code.
16. An elevation of privilege vulnerability in Microsoft SharePoint Server can be exploited remotely to gain privileges.

Comunicados originais

• CVE-2026-47290

• CVE-2026-47642
• CVE-2026-48580
• CVE-2026-50301
• CVE-2026-50314
• CVE-2026-50387
• CVE-2026-50408
• CVE-2026-50467
• CVE-2026-50522
• CVE-2026-50665
• CVE-2026-50675
• CVE-2026-50678
• CVE-2026-54108
• CVE-2026-54131
• CVE-2026-54988
• CVE-2026-55016
• CVE-2026-55017
• CVE-2026-55018
• CVE-2026-55019
• CVE-2026-55020
• CVE-2026-55021
• CVE-2026-55022
• CVE-2026-55023
• CVE-2026-55024
• CVE-2026-55025
• CVE-2026-55026
• CVE-2026-55027
• CVE-2026-55028
• CVE-2026-55029
• CVE-2026-55030
• CVE-2026-55031
• CVE-2026-55032
• CVE-2026-55033
• CVE-2026-55034
• CVE-2026-55035
• CVE-2026-55036
• CVE-2026-55037
• CVE-2026-55038
• CVE-2026-55039
• CVE-2026-55040
• CVE-2026-55041
• CVE-2026-55042
• CVE-2026-55043
• CVE-2026-55044
• CVE-2026-55045
• CVE-2026-55046
• CVE-2026-55047
• CVE-2026-55048
• CVE-2026-55049
• CVE-2026-55050
• CVE-2026-55051
• CVE-2026-55052
• CVE-2026-55053
• CVE-2026-55054
• CVE-2026-55055
• CVE-2026-55056
• CVE-2026-55057
• CVE-2026-55058
• CVE-2026-55120
• CVE-2026-55121
• CVE-2026-55122
• CVE-2026-55123
• CVE-2026-55124
• CVE-2026-55125
• CVE-2026-55126
• CVE-2026-55127
• CVE-2026-55128
• CVE-2026-55129
• CVE-2026-55130
• CVE-2026-55131
• CVE-2026-55132
• CVE-2026-55133
• CVE-2026-55134
• CVE-2026-55135
• CVE-2026-55136
• CVE-2026-55137
• CVE-2026-55138
• CVE-2026-55139
• CVE-2026-55140
• CVE-2026-55141
• CVE-2026-55142
• CVE-2026-55898
• CVE-2026-55899
• CVE-2026-55947
• CVE-2026-55948
• CVE-2026-55949
• CVE-2026-56156
• CVE-2026-56157
• CVE-2026-56164
• CVE-2026-56192
• CVE-2026-56193
• CVE-2026-56195
• CVE-2026-58277
• CVE-2026-58618
• CVE-2026-58644

Exploração

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Lista de CVE

• CVE-2026-50522
  critical
• CVE-2026-50675
  critical
• CVE-2026-50678
  warning
• CVE-2026-54108
  high
• CVE-2026-54988
  high
• CVE-2026-55899
  critical
• CVE-2026-55948
  critical
• CVE-2026-56164
  unknown
• CVE-2026-56193
  warning
• CVE-2026-58618
  critical
• CVE-2026-58644
  critical
• CVE-2026-47290
  critical
• CVE-2026-47642
  critical
• CVE-2026-48580
  high
• CVE-2026-50301
  critical
• CVE-2026-50314
  critical
• CVE-2026-50387
  critical
• CVE-2026-50408
  high
• CVE-2026-50467
  critical
• CVE-2026-50665
  warning
• CVE-2026-54131
  critical
• CVE-2026-55016
  high
• CVE-2026-55017
  critical
• CVE-2026-55018
  critical
• CVE-2026-55019
  high
• CVE-2026-55020
  high
• CVE-2026-55021
  critical
• CVE-2026-55022
  critical
• CVE-2026-55023
  high
• CVE-2026-55024
  critical
• CVE-2026-55025
  critical
• CVE-2026-55026
  high
• CVE-2026-55027
  high
• CVE-2026-55028
  high
• CVE-2026-55029
  critical
• CVE-2026-55030
  high
• CVE-2026-55031
  critical
• CVE-2026-55032
  critical
• CVE-2026-55033
  critical
• CVE-2026-55034
  critical
• CVE-2026-55035
  warning
• CVE-2026-55036
  critical
• CVE-2026-55037
  critical
• CVE-2026-55038
  critical
• CVE-2026-55039
  critical
• CVE-2026-55040
  critical
• CVE-2026-55041
  critical
• CVE-2026-55042
  high
• CVE-2026-55043
  critical
• CVE-2026-55044
  critical
• CVE-2026-55045
  critical
• CVE-2026-55046
  high
• CVE-2026-55047
  high
• CVE-2026-55048
  critical
• CVE-2026-55049
  critical
• CVE-2026-55050
  high
• CVE-2026-55051
  high
• CVE-2026-55052
  critical
• CVE-2026-55053
  critical
• CVE-2026-55054
  high
• CVE-2026-55055
  critical
• CVE-2026-55056
  critical
• CVE-2026-55057
  high
• CVE-2026-55058
  critical
• CVE-2026-55120
  critical
• CVE-2026-55121
  high
• CVE-2026-55122
  high
• CVE-2026-55123
  critical
• CVE-2026-55124
  high
• CVE-2026-55125
  critical
• CVE-2026-55126
  high
• CVE-2026-55127
  critical
• CVE-2026-55128
  critical
• CVE-2026-55129
  critical
• CVE-2026-55130
  critical
• CVE-2026-55131
  critical
• CVE-2026-55132
  critical
• CVE-2026-55133
  critical
• CVE-2026-55134
  critical
• CVE-2026-55135
  high
• CVE-2026-55136
  critical
• CVE-2026-55137
  critical
• CVE-2026-55138
  high
• CVE-2026-55139
  warning
• CVE-2026-55140
  critical
• CVE-2026-55141
  critical
• CVE-2026-55142
  high
• CVE-2026-55898
  high
• CVE-2026-55947
  critical
• CVE-2026-55949
  critical
• CVE-2026-56156
  critical
• CVE-2026-56157
  high
• CVE-2026-56192
  high
• CVE-2026-56195
  high
• CVE-2026-58277
  critical

Lista de KB

• KB5002273
• KB5002748
• KB5002830
• KB5002867
• KB5002873
• KB5002874
• KB5002880
• KB5002882
• KB5002883
• KB5002885
• KB5002886
• KB5002887
• KB5002890
• KB5002891
• KB5002892
• KB5002884

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com