Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information, gain privileges.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Microsoft Word can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
4. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
5. An elevation of privilege vulnerability in Microsoft Office Click-To-Run can be exploited remotely to execute arbitrary code.
6. A security feature bypass vulnerability in Microsoft Excel can be exploited remotely to bypass security restrictions.
7. An information disclosure vulnerability in Microsoft SharePoint can be exploited remotely to obtain sensitive information.
8. A remote code execution vulnerability in Microsoft SharePoint can be exploited remotely to execute arbitrary code.
9. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.

Fiches de renseignement originales

• CVE-2026-20952

• CVE-2026-20944
• CVE-2026-20956
• CVE-2026-20959
• CVE-2026-20955
• CVE-2026-20943
• CVE-2026-20946
• CVE-2026-20949
• CVE-2026-20958
• CVE-2026-20963
• CVE-2026-20951
• CVE-2026-20948
• CVE-2026-20947
• CVE-2026-20953
• CVE-2026-20950
• CVE-2026-20957

Produits associés

• Microsoft-Office
• Microsoft-Excel
• Microsoft-Word
• Microsoft-SharePoint
• Microsoft-365

Liste CVE

• CVE-2026-20943
  high
• CVE-2026-20944
  critical
• CVE-2026-20946
  critical
• CVE-2026-20947
  critical
• CVE-2026-20948
  critical
• CVE-2026-20949
  critical
• CVE-2026-20950
  critical
• CVE-2026-20951
  critical
• CVE-2026-20952
  critical
• CVE-2026-20953
  critical
• CVE-2026-20955
  critical
• CVE-2026-20956
  critical
• CVE-2026-20957
  critical
• CVE-2026-20958
  high
• CVE-2026-20959
  high
• CVE-2026-20963
  critical

Liste KB

• 5002824
• 5002823
• 5002826
• 5002831
• 5002827
• 5002828
• 5002829
• 5002825
• 5002822

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com