Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Office Excel can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Microsoft Office Access can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
4. A remote code execution vulnerability in Microsoft Office OneNote can be exploited remotely to execute arbitrary code.
5. A spoofing vulnerability in Microsoft Office SharePoint can be exploited remotely to spoof user interface.
6. An elevation of privilege vulnerability in Microsoft Office SharePoint can be exploited remotely to gain privileges.
7. An information disclosure vulnerability in Microsoft Office SharePoint can be exploited remotely to obtain sensitive information.
8. An information disclosure vulnerability in Microsoft Office Word can be exploited remotely to obtain sensitive information.
9. A remote code execution vulnerability in Microsoft Office SharePoint can be exploited remotely to execute arbitrary code.
10. A remote code execution vulnerability in Microsoft Office PowerPoint can be exploited remotely to execute arbitrary code.
11. A remote code execution vulnerability in Microsoft Office Word can be exploited remotely to execute arbitrary code.
12. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
13. An information disclosure vulnerability in Microsoft SharePoint Server can be exploited remotely to obtain sensitive information.
14. An information disclosure vulnerability in Microsoft Office Graphics Component can be exploited remotely to obtain sensitive information.
15. An information disclosure vulnerability in Azure DevOps can be exploited remotely to obtain sensitive information.
16. An information disclosure vulnerability in Microsoft Office Excel can be exploited remotely to obtain sensitive information.
17. A remote code execution vulnerability in Windows Rich Text Edit Control can be exploited remotely to execute arbitrary code.
18. A remote code execution vulnerability in Microsoft Office Outlook can be exploited remotely to execute arbitrary code.
19. An elevation of privilege vulnerability in Microsoft Office Click-To-Run can be exploited remotely to gain privileges.
20. An information disclosure vulnerability in Microsoft Office Outlook can be exploited remotely to obtain sensitive information.
21. A remote code execution vulnerability in Skype for Business can be exploited remotely to execute arbitrary code.
22. An elevation of privilege vulnerability in Skype for Business can be exploited remotely to gain privileges.
23. An elevation of privilege vulnerability in Microsoft Office Graphics can be exploited remotely to gain privileges.
24. A security feature bypass vulnerability in Azure Key Vault can be exploited remotely to bypass security restrictions.
25. An elevation of privilege vulnerability in Azure Key Vault Client SDK can be exploited remotely to gain privileges.
26. An information disclosure vulnerability in Azure Key Vault can be exploited remotely to obtain sensitive information.
27. A remote code execution vulnerability in Microsoft Office SharePoint can be exploited remotely to None.
28. An information disclosure vulnerability in Microsoft Office PowerPoint can be exploited remotely to obtain sensitive information.
29. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
30. A security feature bypass vulnerability in Microsoft Office Word can be exploited remotely to bypass security restrictions.
31. An information disclosure vulnerability in Microsoft Office Access can be exploited remotely to obtain sensitive information.
32. A security feature bypass vulnerability in Windows Shell can be exploited remotely to bypass security restrictions.
33. An elevation of privilege vulnerability in Microsoft Office Word can be exploited remotely to gain privileges.
34. An elevation of privilege vulnerability in Microsoft Office OneNote can be exploited remotely to gain privileges.
35. A tampering vulnerability in Microsoft Office SharePoint can be exploited remotely to spoof user interface.

Original advisories

• CVE-2026-100209

• CVE-2026-100210
• CVE-2026-100211
• CVE-2026-100212
• CVE-2026-102849
• CVE-2026-102850
• CVE-2026-102855
• CVE-2026-102856
• CVE-2026-102857
• CVE-2026-102858
• CVE-2026-102859
• CVE-2026-102860
• CVE-2026-102861
• CVE-2026-102862
• CVE-2026-102863
• CVE-2026-102864
• CVE-2026-102865
• CVE-2026-102866
• CVE-2026-102867
• CVE-2026-105013
• CVE-2026-105591
• CVE-2026-105592
• CVE-2026-105593
• CVE-2026-105595
• CVE-2026-105596
• CVE-2026-105597
• CVE-2026-105598
• CVE-2026-105599
• CVE-2026-105713
• CVE-2026-105714
• CVE-2026-105715
• CVE-2026-105716
• CVE-2026-105717
• CVE-2026-105718
• CVE-2026-105719
• CVE-2026-105720
• CVE-2026-105731
• CVE-2026-69877
• CVE-2026-69922
• CVE-2026-69943
• CVE-2026-70096
• CVE-2026-70202
• CVE-2026-70206
• CVE-2026-70214
• CVE-2026-70215
• CVE-2026-70217
• CVE-2026-70219
• CVE-2026-70220
• CVE-2026-70242
• CVE-2026-70246
• CVE-2026-70251
• CVE-2026-70254
• CVE-2026-70256
• CVE-2026-70257
• CVE-2026-70259
• CVE-2026-70263
• CVE-2026-70266
• CVE-2026-70267
• CVE-2026-70268
• CVE-2026-70269
• CVE-2026-70276
• CVE-2026-70281
• CVE-2026-70282
• CVE-2026-70287
• CVE-2026-70291
• CVE-2026-70297
• CVE-2026-70298
• CVE-2026-70300
• CVE-2026-70301
• CVE-2026-70302
• CVE-2026-77902
• CVE-2026-83746
• CVE-2026-83891
• CVE-2026-85340
• CVE-2026-85873
• CVE-2026-85881
• CVE-2026-85900
• CVE-2026-85922
• CVE-2026-85925
• CVE-2026-85932
• CVE-2026-88109
• CVE-2026-88132
• CVE-2026-88144
• CVE-2026-88145
• CVE-2026-88150
• CVE-2026-88151
• CVE-2026-88153
• CVE-2026-88154
• CVE-2026-88155
• CVE-2026-88156
• CVE-2026-88163
• CVE-2026-88166
• CVE-2026-88167
• CVE-2026-88169
• CVE-2026-88172
• CVE-2026-88175
• CVE-2026-88178
• CVE-2026-88183
• CVE-2026-88184
• CVE-2026-88185
• CVE-2026-88186
• CVE-2026-88190
• CVE-2026-88192
• CVE-2026-88195
• CVE-2026-88196
• CVE-2026-88197
• CVE-2026-88198
• CVE-2026-88200
• CVE-2026-88201
• CVE-2026-88202
• CVE-2026-88203
• CVE-2026-88204
• CVE-2026-88206
• CVE-2026-88207
• CVE-2026-88208
• CVE-2026-88209
• CVE-2026-88210
• CVE-2026-94506
• CVE-2026-96044
• CVE-2026-96951
• CVE-2026-96995
• CVE-2026-96996
• CVE-2026-96997
• CVE-2026-97001
• CVE-2026-97003
• CVE-2026-97004
• CVE-2026-97005
• CVE-2026-97007
• CVE-2026-97008
• CVE-2026-97009
• CVE-2026-97010
• CVE-2026-97011
• CVE-2026-97012
• CVE-2026-97014
• CVE-2026-97016
• CVE-2026-97017
• CVE-2026-97738
• CVE-2026-97739
• CVE-2026-97740
• CVE-2026-97741
• CVE-2026-97742
• CVE-2026-97743
• CVE-2026-97744
• CVE-2026-97745
• CVE-2026-97746
• CVE-2026-97747
• CVE-2026-97748
• CVE-2026-97749
• CVE-2026-97750
• CVE-2026-97751
• CVE-2026-97752
• CVE-2026-97753
• CVE-2026-97754
• CVE-2026-97755
• CVE-2026-97756
• CVE-2026-97757
• CVE-2026-97758
• CVE-2026-97759
• CVE-2026-97760
• CVE-2026-97761
• CVE-2026-97762
• CVE-2026-97763
• CVE-2026-97765
• CVE-2026-97766
• CVE-2026-97767
• CVE-2026-97768
• CVE-2026-97769
• CVE-2026-97770
• CVE-2026-97771
• CVE-2026-97772
• CVE-2026-97773
• CVE-2026-97774
• CVE-2026-97775
• CVE-2026-97776
• CVE-2026-97777
• CVE-2026-97778
• CVE-2026-97779
• CVE-2026-97780
• CVE-2026-97781
• CVE-2026-97782
• CVE-2026-97783

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Office
• Microsoft-Outlook
• Skype-for-Business
• Microsoft-Azure
• Microsoft-SharePoint
• Microsoft-365

CVE list

• CVE-2026-100209
  unknown
• CVE-2026-100210
  unknown
• CVE-2026-100211
  unknown
• CVE-2026-100212
  unknown
• CVE-2026-102849
  unknown
• CVE-2026-102850
  unknown
• CVE-2026-102856
  unknown
• CVE-2026-102857
  unknown
• CVE-2026-102858
  unknown
• CVE-2026-102859
  unknown
• CVE-2026-102860
  unknown
• CVE-2026-102861
  unknown
• CVE-2026-102862
  unknown
• CVE-2026-102863
  unknown
• CVE-2026-102864
  unknown
• CVE-2026-102865
  unknown
• CVE-2026-102866
  unknown
• CVE-2026-102867
  unknown
• CVE-2026-105013
  unknown
• CVE-2026-105591
  unknown
• CVE-2026-105592
  unknown
• CVE-2026-105593
  unknown
• CVE-2026-105595
  unknown
• CVE-2026-105596
  unknown
• CVE-2026-105597
  unknown
• CVE-2026-105598
  unknown
• CVE-2026-105599
  unknown
• CVE-2026-105713
  unknown
• CVE-2026-105714
  unknown
• CVE-2026-105715
  unknown
• CVE-2026-105716
  unknown
• CVE-2026-105717
  unknown
• CVE-2026-105718
  unknown
• CVE-2026-105719
  unknown
• CVE-2026-105720
  unknown
• CVE-2026-105731
  unknown
• CVE-2026-69877
  unknown
• CVE-2026-69922
  unknown
• CVE-2026-69943
  unknown
• CVE-2026-70096
  unknown
• CVE-2026-70202
  unknown
• CVE-2026-70206
  unknown
• CVE-2026-70214
  unknown
• CVE-2026-70215
  unknown
• CVE-2026-70217
  unknown
• CVE-2026-70219
  high
• CVE-2026-70220
  unknown
• CVE-2026-70242
  unknown
• CVE-2026-70246
  unknown
• CVE-2026-70251
  unknown
• CVE-2026-70254
  critical
• CVE-2026-70256
  unknown
• CVE-2026-70257
  unknown
• CVE-2026-70259
  unknown
• CVE-2026-70263
  unknown
• CVE-2026-70266
  unknown
• CVE-2026-70267
  unknown
• CVE-2026-70268
  unknown
• CVE-2026-70269
  unknown
• CVE-2026-70276
  unknown
• CVE-2026-70281
  unknown
• CVE-2026-70282
  unknown
• CVE-2026-70287
  unknown
• CVE-2026-70291
  unknown
• CVE-2026-70297
  unknown
• CVE-2026-70298
  unknown
• CVE-2026-70300
  unknown
• CVE-2026-70301
  unknown
• CVE-2026-70302
  unknown
• CVE-2026-77902
  critical
• CVE-2026-83746
  unknown
• CVE-2026-83891
  unknown
• CVE-2026-85340
  unknown
• CVE-2026-85873
  unknown
• CVE-2026-85881
  unknown
• CVE-2026-85900
  unknown
• CVE-2026-85922
  unknown
• CVE-2026-85925
  unknown
• CVE-2026-85932
  unknown
• CVE-2026-88109
  unknown
• CVE-2026-88132
  unknown
• CVE-2026-88144
  unknown
• CVE-2026-88145
  critical
• CVE-2026-88150
  unknown
• CVE-2026-88151
  high
• CVE-2026-88153
  high
• CVE-2026-88154
  high
• CVE-2026-88155
  unknown
• CVE-2026-88156
  unknown
• CVE-2026-88163
  unknown
• CVE-2026-88166
  unknown
• CVE-2026-88167
  unknown
• CVE-2026-88169
  unknown
• CVE-2026-88172
  high
• CVE-2026-88175
  high
• CVE-2026-88178
  unknown
• CVE-2026-88183
  unknown
• CVE-2026-88184
  high
• CVE-2026-88185
  unknown
• CVE-2026-88186
  unknown
• CVE-2026-88190
  unknown
• CVE-2026-88192
  unknown
• CVE-2026-88195
  unknown
• CVE-2026-88196
  unknown
• CVE-2026-88197
  unknown
• CVE-2026-88198
  unknown
• CVE-2026-88200
  unknown
• CVE-2026-88201
  unknown
• CVE-2026-88202
  unknown
• CVE-2026-88203
  unknown
• CVE-2026-88204
  unknown
• CVE-2026-88206
  unknown
• CVE-2026-88207
  unknown
• CVE-2026-88208
  unknown
• CVE-2026-88209
  unknown
• CVE-2026-88210
  unknown
• CVE-2026-94506
  unknown
• CVE-2026-96044
  unknown
• CVE-2026-96951
  unknown
• CVE-2026-96995
  unknown
• CVE-2026-96996
  unknown
• CVE-2026-96997
  unknown
• CVE-2026-97001
  unknown
• CVE-2026-97003
  unknown
• CVE-2026-97004
  unknown
• CVE-2026-97005
  unknown
• CVE-2026-97007
  unknown
• CVE-2026-97008
  unknown
• CVE-2026-97009
  unknown
• CVE-2026-97010
  unknown
• CVE-2026-97011
  unknown
• CVE-2026-97012
  unknown
• CVE-2026-97014
  unknown
• CVE-2026-97016
  unknown
• CVE-2026-97017
  unknown
• CVE-2026-97738
  unknown
• CVE-2026-97739
  unknown
• CVE-2026-97740
  unknown
• CVE-2026-97741
  unknown
• CVE-2026-97742
  unknown
• CVE-2026-97743
  unknown
• CVE-2026-97744
  unknown
• CVE-2026-97745
  unknown
• CVE-2026-97746
  unknown
• CVE-2026-97747
  unknown
• CVE-2026-97748
  unknown
• CVE-2026-97749
  unknown
• CVE-2026-97750
  unknown
• CVE-2026-97751
  unknown
• CVE-2026-97752
  unknown
• CVE-2026-97753
  unknown
• CVE-2026-97754
  unknown
• CVE-2026-97755
  unknown
• CVE-2026-97756
  unknown
• CVE-2026-97757
  unknown
• CVE-2026-97758
  unknown
• CVE-2026-97759
  unknown
• CVE-2026-97760
  unknown
• CVE-2026-97761
  unknown
• CVE-2026-97762
  unknown
• CVE-2026-97763
  unknown
• CVE-2026-97765
  unknown
• CVE-2026-97766
  unknown
• CVE-2026-97767
  unknown
• CVE-2026-97768
  unknown
• CVE-2026-97769
  unknown
• CVE-2026-97770
  unknown
• CVE-2026-97771
  unknown
• CVE-2026-97772
  unknown
• CVE-2026-97773
  unknown
• CVE-2026-97774
  unknown
• CVE-2026-97775
  unknown
• CVE-2026-97776
  unknown
• CVE-2026-97777
  unknown
• CVE-2026-97778
  unknown
• CVE-2026-97779
  unknown
• CVE-2026-97780
  unknown
• CVE-2026-97781
  unknown
• CVE-2026-97782
  unknown
• CVE-2026-97783
  unknown
• CVE-2026-102855
  unknown

KB list

• 5002927
• 5002928
• 5131692
• 5131693
• 5132779

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com