Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Azure Service Bus can be exploited remotely to execute arbitrary code.
2. An elevation of privilege vulnerability in Azure SQL Managed Instance can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Microsoft Teams can be exploited remotely to gain privileges.
4. A spoofing vulnerability in Microsoft Teams can be exploited remotely to spoof user interface.
5. A spoofing vulnerability in Microsoft Office SharePoint can be exploited remotely to spoof user interface.

Original advisories

• CVE-2026-50515

• CVE-2026-62836
• CVE-2026-62896
• CVE-2026-62918
• CVE-2026-65667
• CVE-2026-70332

Exploitation

Related products

• Microsoft-Service-Bus
• Microsoft-Azure
• Microsoft-SharePoint

CVE list

• CVE-2026-50515
  unknown
• CVE-2026-62836
  unknown
• CVE-2026-62896
  unknown
• CVE-2026-62918
  unknown
• CVE-2026-65667
  unknown
• CVE-2026-70332
  unknown

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com