New vulnerabilities – clearly explained

Microsoft Office Word: Stack-based buffer overflow allows remote code execution

A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The attack requires that a user opens a malicious Office file, typically received by email or download, so user interaction is needed. Code runs with the rights of the logged-in user, and the CVSS base score is 8.8 (high).

Microsoft · Microsoft Office Word

Microsoft Office: Heap-based buffer overflow allows remote code execution

A heap-based buffer overflow in Microsoft Office (CWE-122) allows an unauthenticated attacker to execute code over a network. The CVSS 3.1 base score is 8.8. Exploitation requires user interaction, so the likely path is a crafted document delivered by phishing or a malicious attachment. The vendor record covers Microsoft 365 Apps for Enterprise, Office LTSC 2021, Office LTSC 2024 and Office for Mac.

Microsoft · 365 Apps

Microsoft Office Word: Remote Code Execution due to off-by-one error

A off-by-one error (CWE-193) in Microsoft Office Word allows remote code execution. Microsoft 365 Apps, Office LTSC 2021 and 2024 and Office for Mac are affected according to the CNA data. An unauthenticated attacker can exploit it over the network if a user opens a crafted document, for example one received by email or downloaded from the web. Successful exploitation would give the attacker full impact on confidentiality, integrity and availability of the affected system.

Microsoft · 365 Apps

Microsoft Office Word: Remote code execution through use-after-free

A use-after-free vulnerability (CWE-416) in Microsoft Office Word allows an unauthorized attacker to execute code over a network. A user must open a malicious Word file, for example one received by email or downloaded from the internet. Successful exploitation could fully compromise confidentiality, integrity and availability of the affected system. Microsoft 365 Apps and Office LTSC clients are affected.

Microsoft · Office Word

Microsoft Office Word: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code on a vulnerable system over the network. Exploitation requires that a user opens or otherwise processes a malicious document, for example one received by email. The CVSS base score is 8.8 (High). CISA SSVC data rates exploitation as none, and no public exploit was found.

Microsoft · Office Word (Microsoft 365 Apps)

Microsoft Office Word: Remote code execution via stack-based buffer overflow

A stack-based buffer overflow in Microsoft Office Word (CWE-121) allows an unauthorized attacker to execute code over a network. The attack requires the victim to interact, most likely by opening a crafted document such as an email attachment or a download. The CNA rates the flaw CVSS 8.8 (High); a VulDB entry rates it 5.5 (Medium), and the NVD status is inconsistent across sources.

Microsoft · Office Word

Microsoft Office Word: Remote code execution through heap-based buffer overflow

A heap-based buffer overflow in Microsoft Word, part of Microsoft 365 Apps and Office LTSC, allows remote code execution. An unauthenticated attacker can trigger it over the network, but a user must open a malicious document or follow a malicious link. Successful exploitation would give the attacker high impact on confidentiality, integrity and availability of the affected system.

Microsoft · Office Word

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft Office Word: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in Microsoft Word allows an unauthenticated attacker to execute code over a network. The attack requires a user to open a crafted Word document, for example one received by email or from shared storage, and the code runs with the rights of the logged-in user. The CVSS 3.1 base score is 8.8 (High), based on the CNA record.

Microsoft · 365 Apps

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft Office Word: Heap-based buffer overflow enables code execution

A heap-based buffer overflow in Microsoft Word, the document editor in Microsoft Office, allows an unauthorized attacker to execute code over a network. The attack requires user interaction, typically opening a crafted document received by email or download, and no privileges. CISA SSVC rates exploitation as none, and no public proof of concept or in-the-wild exploitation was found in the sources reviewed.

Microsoft · Microsoft 365 Apps

Microsoft 365 Apps: Remote code execution in Word via stack-based buffer overflow

A stack-based buffer overflow in Microsoft Word, part of Microsoft 365 Apps, Office LTSC and Office for Mac, allows an attacker to execute code over a network. The attacker needs no privileges, but a victim must open a crafted document, for example one received as an email attachment. The CVSS score is 8.8 (High). No exploitation or public proof of concept is known.

Microsoft · Microsoft 365 Apps

Microsoft Word: Heap-based buffer overflow enables remote code execution

A heap-based buffer overflow in Microsoft Word, part of Microsoft 365 Apps and Office LTSC releases, can be exploited by an unauthenticated remote attacker. The CVSS vector requires user interaction, so an attacker would need to get a victim to open a crafted Word document, typically sent by email or downloaded. Successful exploitation could allow arbitrary code execution with the privileges of the user. No public proof of concept or evidence of active exploitation was found.

Microsoft · Microsoft Word

Microsoft Office Word: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated remote attacker to execute code. Exploitation requires user interaction (UI:R), most likely by opening a crafted Word document received by email or download. The CVSS vector rates confidentiality, integrity and availability impact as high. CISA SSVC lists exploitation as none, and no public proof of concept was found in the sources reviewed.

Microsoft · Office Word

Microsoft Office Word: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code on a vulnerable system over the network. Exploitation requires a user to open a specially crafted file, which is typically delivered by email or download. Microsoft rates the issue as Important with a CVSS 3.1 base score of 8.8.

Microsoft · Office Word

Microsoft Office Word: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in Microsoft Office Word allows remote code execution. Affected are Microsoft 365 Apps for Enterprise and Office LTSC 2021 and LTSC 2024 installations below the fixed builds. An unauthenticated attacker can run code over the network if a user opens a malicious document, for example one received by email or shared as a file. The NVD and CNA rating is CVSS 8.8 (High).

Microsoft · Office Word

Office Word: Heap-based buffer overflow enables remote code execution

A heap-based buffer overflow in Microsoft Word, part of Microsoft 365 Apps for Enterprise and Office LTSC 2021 and 2024, allows remote code execution. An attacker can run code on the victim's computer if a user opens a manipulated document, for example one received by email or downloaded from the internet. No login is required, but user interaction is needed. The CVSS 3.1 base score is 8.8. No exploitation is known at the time of writing.

Microsoft · Office Word

Microsoft SharePoint Server: Elevation of privilege due to missing authorization

A missing authorization check in Microsoft Office SharePoint Server Subscription Edition allows an authenticated attacker with a low-privileged account to elevate privileges over the network. Per the CVSS vector, successful exploitation can impact confidentiality, integrity and availability. The attacker needs a valid login, so the risk is highest for farms reachable from the internet or with many user accounts.

Microsoft · SharePoint Server

Microsoft SQL Server: Remote code execution via heap-based buffer overflow

Multiple supported versions of Microsoft SQL Server (2017, 2019, 2022 and 2025) contain a heap-based buffer overflow. An authorized attacker can exploit it over the network to execute code. CVSS 8.8 (High) assumes low privileges and no user interaction. CISA SSVC rates the technical impact as total, but exploitation is not automatable.

Microsoft · SQL Server

Microsoft SQL Server: Heap-based buffer overflow enables remote code execution

A heap-based buffer overflow in Microsoft SQL Server allows remote code execution over the network. An attacker needs a valid low-privilege database account, and exploitation is rated as high complexity. A successful attack can fully compromise confidentiality, integrity and availability of the database server, with a changed scope.

Microsoft · SQL Server

Microsoft SQL Server: Heap-based buffer overflow leading to privilege escalation

Microsoft SQL Server 2017, 2019, 2022 and 2025 (GDR and CU builds) contains a heap-based buffer overflow. An attacker with a valid low-privilege SQL login can elevate privileges over the network. Exploitation requires high attack complexity and an existing SQL login, which is common with shared or service accounts. Microsoft fixed the issue in the October 13, 2026 security updates. No exploitation and no public proof of concept are known.

Microsoft · SQL Server

Microsoft SQL Server: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow (CWE-122) in Microsoft SQL Server allows remote code execution over the network. An attacker needs network access and a low-privilege account, such as any SQL login or application service account, and the attack complexity is high. Successful exploitation can lead to full compromise of the database server, and the scope change means the impact may reach beyond SQL Server.

Microsoft · SQL Server