Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Microsoft Office SharePoint can be exploited remotely to spoof user interface.
2. An information disclosure vulnerability in Microsoft Office SharePoint can be exploited remotely to obtain sensitive information.
3. A remote code execution vulnerability in Microsoft Office SharePoint can be exploited remotely to execute arbitrary code.
4. An elevation of privilege vulnerability in Microsoft Office SharePoint can be exploited remotely to gain privileges.
5. A remote code execution vulnerability in Microsoft PowerPoint can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in Microsoft Office Word can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Microsoft Office Access can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
9. A remote code execution vulnerability in Microsoft Office Outlook can be exploited remotely to execute arbitrary code.
10. An information disclosure vulnerability in Microsoft Office Word can be exploited remotely to obtain sensitive information.
11. A remote code execution vulnerability in Microsoft Word can be exploited remotely to execute arbitrary code.
12. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
13. An information disclosure vulnerability in Microsoft Office can be exploited remotely to obtain sensitive information.
14. An information disclosure vulnerability in Microsoft Office Excel can be exploited remotely to obtain sensitive information.
15. A remote code execution vulnerability in Microsoft Office PowerPoint can be exploited remotely to execute arbitrary code.
16. An information disclosure vulnerability in Microsoft Office PowerPoint can be exploited remotely to obtain sensitive information.
17. A spoofing vulnerability in Microsoft Teams can be exploited remotely to spoof user interface.
18. A remote code execution vulnerability in Microsoft Office Excel can be exploited remotely to execute arbitrary code.
19. An elevation of privilege vulnerability in Microsoft Office Excel can be exploited remotely to gain privileges.
20. An information disclosure vulnerability in Microsoft Office Outlook can be exploited remotely to obtain sensitive information.
21. A security feature bypass vulnerability in Microsoft Office can be exploited remotely to bypass security restrictions.
22. An elevation of privilege vulnerability in Microsoft SharePoint Server can be exploited remotely to gain privileges.
23. A spoofing vulnerability in Microsoft Teams for Android can be exploited remotely to spoof user interface.
24. A spoofing vulnerability in Microsoft Outlook can be exploited remotely to spoof user interface.

Original advisories

• CVE-2026-109454

• CVE-2026-109455
• CVE-2026-109456
• CVE-2026-109464
• CVE-2026-109466
• CVE-2026-109472
• CVE-2026-109487
• CVE-2026-109491
• CVE-2026-109493
• CVE-2026-109494
• CVE-2026-109495
• CVE-2026-109496
• CVE-2026-109497
• CVE-2026-109498
• CVE-2026-109499
• CVE-2026-109500
• CVE-2026-109501
• CVE-2026-109502
• CVE-2026-109503
• CVE-2026-109504
• CVE-2026-109505
• CVE-2026-110043
• CVE-2026-110044
• CVE-2026-110045
• CVE-2026-110046
• CVE-2026-110047
• CVE-2026-110048
• CVE-2026-110049
• CVE-2026-110050
• CVE-2026-110051
• CVE-2026-110052
• CVE-2026-110053
• CVE-2026-110054
• CVE-2026-110055
• CVE-2026-110056
• CVE-2026-110057
• CVE-2026-110058
• CVE-2026-110059
• CVE-2026-110060
• CVE-2026-110061
• CVE-2026-110062
• CVE-2026-110064
• CVE-2026-110065
• CVE-2026-110066
• CVE-2026-110067
• CVE-2026-110068
• CVE-2026-111285
• CVE-2026-111286
• CVE-2026-111287
• CVE-2026-111288
• CVE-2026-111289
• CVE-2026-111290
• CVE-2026-111291
• CVE-2026-111292
• CVE-2026-111293
• CVE-2026-111294
• CVE-2026-111295
• CVE-2026-111296
• CVE-2026-111297
• CVE-2026-111298
• CVE-2026-111299
• CVE-2026-111300
• CVE-2026-111301
• CVE-2026-111302
• CVE-2026-111303
• CVE-2026-111304
• CVE-2026-111305
• CVE-2026-111306
• CVE-2026-111307
• CVE-2026-111308
• CVE-2026-111309
• CVE-2026-111310
• CVE-2026-112714
• CVE-2026-112715
• CVE-2026-112716
• CVE-2026-112717
• CVE-2026-112718
• CVE-2026-112719
• CVE-2026-112720
• CVE-2026-112721
• CVE-2026-112722
• CVE-2026-112723
• CVE-2026-112724
• CVE-2026-112726
• CVE-2026-112728
• CVE-2026-112729
• CVE-2026-112730
• CVE-2026-112731
• CVE-2026-112733
• CVE-2026-112734
• CVE-2026-112735
• CVE-2026-112736
• CVE-2026-112737
• CVE-2026-112738
• CVE-2026-112739
• CVE-2026-112741
• CVE-2026-113759
• CVE-2026-116717
• CVE-2026-116718
• CVE-2026-116719
• CVE-2026-116720
• CVE-2026-116721
• CVE-2026-116722
• CVE-2026-116922
• CVE-2026-116923
• CVE-2026-116925
• CVE-2026-116926
• CVE-2026-116927
• CVE-2026-118292
• CVE-2026-118293
• CVE-2026-118294
• CVE-2026-118295
• CVE-2026-118296
• CVE-2026-118297
• CVE-2026-118298
• CVE-2026-118299
• CVE-2026-118300
• CVE-2026-118301
• CVE-2026-118302
• CVE-2026-118700
• CVE-2026-118701
• CVE-2026-118702
• CVE-2026-118703
• CVE-2026-118704
• CVE-2026-118705
• CVE-2026-118706
• CVE-2026-118707
• CVE-2026-118708
• CVE-2026-118709
• CVE-2026-118710
• CVE-2026-118711
• CVE-2026-118712
• CVE-2026-118713
• CVE-2026-118714
• CVE-2026-118715
• CVE-2026-118716
• CVE-2026-118717
• CVE-2026-118718
• CVE-2026-118719
• CVE-2026-118720
• CVE-2026-118721
• CVE-2026-118722
• CVE-2026-118723
• CVE-2026-118724
• CVE-2026-118725
• CVE-2026-118726
• CVE-2026-118727
• CVE-2026-118728
• CVE-2026-118729
• CVE-2026-118730
• CVE-2026-118731
• CVE-2026-118732
• CVE-2026-119986
• CVE-2026-119993
• CVE-2026-119995
• CVE-2026-119996
• CVE-2026-119997
• CVE-2026-119998
• CVE-2026-119999
• CVE-2026-120000
• CVE-2026-120001
• CVE-2026-120002
• CVE-2026-120003
• CVE-2026-120005
• CVE-2026-120785
• CVE-2026-120786
• CVE-2026-120788
• CVE-2026-120789
• CVE-2026-120790
• CVE-2026-120791
• CVE-2026-122198
• CVE-2026-122979
• CVE-2026-123375
• CVE-2026-123376
• CVE-2026-123377
• CVE-2026-123378
• CVE-2026-123379
• CVE-2026-123380
• CVE-2026-123381
• CVE-2026-123382
• CVE-2026-123383
• CVE-2026-123384
• CVE-2026-123385
• CVE-2026-123390
• CVE-2026-123391
• CVE-2026-123394
• CVE-2026-123395
• CVE-2026-124170
• CVE-2026-124174
• CVE-2026-124176
• CVE-2026-124178
• CVE-2026-124179
• CVE-2026-124183
• CVE-2026-124185
• CVE-2026-124187
• CVE-2026-124194
• CVE-2026-124210
• CVE-2026-124227
• CVE-2026-124228
• CVE-2026-124229
• CVE-2026-124233
• CVE-2026-69901
• CVE-2026-80095
• CVE-2026-88176

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Office
• Microsoft-SharePoint
• Microsoft-365

CVE list

• CVE-2026-109454
  critical
• CVE-2026-109455
  high
• CVE-2026-109456
  warning
• CVE-2026-109464
  critical
• CVE-2026-109466
  critical
• CVE-2026-109472
  critical
• CVE-2026-109487
  critical
• CVE-2026-109491
  critical
• CVE-2026-109493
  critical
• CVE-2026-109494
  critical
• CVE-2026-109495
  high
• CVE-2026-109496
  critical
• CVE-2026-109497
  high
• CVE-2026-109498
  critical
• CVE-2026-109499
  critical
• CVE-2026-109500
  critical
• CVE-2026-109501
  critical
• CVE-2026-109502
  critical
• CVE-2026-109503
  critical
• CVE-2026-109504
  high
• CVE-2026-109505
  critical
• CVE-2026-110043
  critical
• CVE-2026-110044
  critical
• CVE-2026-110045
  high
• CVE-2026-110046
  high
• CVE-2026-110047
  critical
• CVE-2026-110048
  critical
• CVE-2026-110049
  critical
• CVE-2026-110050
  critical
• CVE-2026-110051
  high
• CVE-2026-110052
  critical
• CVE-2026-110053
  critical
• CVE-2026-110054
  critical
• CVE-2026-110055
  critical
• CVE-2026-110056
  critical
• CVE-2026-110057
  high
• CVE-2026-110058
  critical
• CVE-2026-110059
  critical
• CVE-2026-110060
  critical
• CVE-2026-110061
  critical
• CVE-2026-110062
  critical
• CVE-2026-110064
  critical
• CVE-2026-110065
  high
• CVE-2026-110066
  high
• CVE-2026-110067
  critical
• CVE-2026-110068
  critical
• CVE-2026-111285
  critical
• CVE-2026-111286
  critical
• CVE-2026-111287
  critical
• CVE-2026-111288
  high
• CVE-2026-111289
  critical
• CVE-2026-111290
  critical
• CVE-2026-111291
  high
• CVE-2026-111292
  high
• CVE-2026-111293
  high
• CVE-2026-111294
  critical
• CVE-2026-111295
  critical
• CVE-2026-111296
  critical
• CVE-2026-111297
  critical
• CVE-2026-111298
  critical
• CVE-2026-111299
  critical
• CVE-2026-111300
  high
• CVE-2026-111301
  critical
• CVE-2026-111302
  critical
• CVE-2026-111303
  high
• CVE-2026-111304
  critical
• CVE-2026-111305
  critical
• CVE-2026-111306
  critical
• CVE-2026-111307
  critical
• CVE-2026-111308
  critical
• CVE-2026-111309
  critical
• CVE-2026-111310
  critical
• CVE-2026-112714
  critical
• CVE-2026-112715
  critical
• CVE-2026-112716
  critical
• CVE-2026-112717
  critical
• CVE-2026-112718
  critical
• CVE-2026-112719
  critical
• CVE-2026-112720
  high
• CVE-2026-112721
  critical
• CVE-2026-112722
  critical
• CVE-2026-112723
  critical
• CVE-2026-112724
  critical
• CVE-2026-112726
  critical
• CVE-2026-112728
  critical
• CVE-2026-112729
  critical
• CVE-2026-112730
  critical
• CVE-2026-112731
  high
• CVE-2026-112733
  critical
• CVE-2026-112734
  critical
• CVE-2026-112735
  critical
• CVE-2026-112736
  high
• CVE-2026-112737
  critical
• CVE-2026-112738
  high
• CVE-2026-112739
  critical
• CVE-2026-112741
  critical
• CVE-2026-113759
  critical
• CVE-2026-116717
  critical
• CVE-2026-116718
  critical
• CVE-2026-116719
  critical
• CVE-2026-116720
  critical
• CVE-2026-116721
  high
• CVE-2026-116722
  critical
• CVE-2026-116922
  high
• CVE-2026-116923
  critical
• CVE-2026-116925
  critical
• CVE-2026-116926
  critical
• CVE-2026-116927
  critical
• CVE-2026-118292
  critical
• CVE-2026-118293
  critical
• CVE-2026-118294
  critical
• CVE-2026-118295
  critical
• CVE-2026-118296
  critical
• CVE-2026-118297
  critical
• CVE-2026-118298
  critical
• CVE-2026-118299
  critical
• CVE-2026-118300
  high
• CVE-2026-118301
  critical
• CVE-2026-118302
  critical
• CVE-2026-118700
  critical
• CVE-2026-118701
  critical
• CVE-2026-118702
  critical
• CVE-2026-118703
  critical
• CVE-2026-118704
  critical
• CVE-2026-118705
  critical
• CVE-2026-118706
  critical
• CVE-2026-118707
  critical
• CVE-2026-118708
  critical
• CVE-2026-118709
  critical
• CVE-2026-118710
  critical
• CVE-2026-118711
  critical
• CVE-2026-118712
  critical
• CVE-2026-118713
  critical
• CVE-2026-118714
  critical
• CVE-2026-118715
  critical
• CVE-2026-118716
  critical
• CVE-2026-118717
  critical
• CVE-2026-118718
  critical
• CVE-2026-118719
  critical
• CVE-2026-118720
  critical
• CVE-2026-118721
  critical
• CVE-2026-118722
  critical
• CVE-2026-118723
  critical
• CVE-2026-118724
  critical
• CVE-2026-118725
  critical
• CVE-2026-118726
  critical
• CVE-2026-118727
  high
• CVE-2026-118728
  high
• CVE-2026-118729
  critical
• CVE-2026-118730
  critical
• CVE-2026-118731
  critical
• CVE-2026-118732
  critical
• CVE-2026-119986
  critical
• CVE-2026-119993
  high
• CVE-2026-119995
  critical
• CVE-2026-119996
  critical
• CVE-2026-119997
  critical
• CVE-2026-119998
  high
• CVE-2026-119999
  high
• CVE-2026-120000
  critical
• CVE-2026-120001
  critical
• CVE-2026-120002
  critical
• CVE-2026-120003
  critical
• CVE-2026-120005
  critical
• CVE-2026-120785
  critical
• CVE-2026-120786
  critical
• CVE-2026-120788
  critical
• CVE-2026-120789
  critical
• CVE-2026-120790
  critical
• CVE-2026-120791
  critical
• CVE-2026-122198
  critical
• CVE-2026-122979
  critical
• CVE-2026-123375
  critical
• CVE-2026-123376
  critical
• CVE-2026-123377
  critical
• CVE-2026-123378
  critical
• CVE-2026-123379
  critical
• CVE-2026-123380
  critical
• CVE-2026-123381
  critical
• CVE-2026-123382
  critical
• CVE-2026-123383
  critical
• CVE-2026-123384
  critical
• CVE-2026-123385
  critical
• CVE-2026-123390
  critical
• CVE-2026-123391
  critical
• CVE-2026-123394
  critical
• CVE-2026-123395
  high
• CVE-2026-124170
  critical
• CVE-2026-124174
  critical
• CVE-2026-124176
  critical
• CVE-2026-124178
  high
• CVE-2026-124179
  high
• CVE-2026-124183
  high
• CVE-2026-124185
  critical
• CVE-2026-124187
  critical
• CVE-2026-124194
  high
• CVE-2026-124210
  high
• CVE-2026-124227
  critical
• CVE-2026-124228
  critical
• CVE-2026-124229
  high
• CVE-2026-124233
  high
• CVE-2026-69901
  critical
• CVE-2026-80095
  critical
• CVE-2026-88176
  critical

KB list

• 5002908
• 5002927
• 5002945
• 5002946

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com