Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information, gain privileges.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Microsoft Word can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
4. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
5. An elevation of privilege vulnerability in Microsoft Office Click-To-Run can be exploited remotely to execute arbitrary code.
6. A security feature bypass vulnerability in Microsoft Excel can be exploited remotely to bypass security restrictions.
7. An information disclosure vulnerability in Microsoft SharePoint can be exploited remotely to obtain sensitive information.
8. A remote code execution vulnerability in Microsoft SharePoint can be exploited remotely to execute arbitrary code.
9. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2026-20952

• CVE-2026-20944
• CVE-2026-20956
• CVE-2026-20959
• CVE-2026-20955
• CVE-2026-20943
• CVE-2026-20946
• CVE-2026-20949
• CVE-2026-20958
• CVE-2026-20963
• CVE-2026-20951
• CVE-2026-20948
• CVE-2026-20947
• CVE-2026-20953
• CVE-2026-20950
• CVE-2026-20957

Related products

• Microsoft-Office
• Microsoft-Excel
• Microsoft-Word
• Microsoft-SharePoint
• Microsoft-365

CVE list

• CVE-2026-20943
  high
• CVE-2026-20944
  critical
• CVE-2026-20946
  critical
• CVE-2026-20947
  critical
• CVE-2026-20948
  critical
• CVE-2026-20949
  critical
• CVE-2026-20950
  critical
• CVE-2026-20951
  critical
• CVE-2026-20952
  critical
• CVE-2026-20953
  critical
• CVE-2026-20955
  critical
• CVE-2026-20956
  critical
• CVE-2026-20957
  critical
• CVE-2026-20958
  high
• CVE-2026-20959
  high
• CVE-2026-20963
  critical

KB list

• 5002824
• 5002823
• 5002826
• 5002831
• 5002827
• 5002828
• 5002829
• 5002825
• 5002822

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com