VULNERABILITY INTELLIGENCE

CVE index

Use CVSS, EPSS, CISA KEV, affected-version data, and source evidence as separate signals for prioritization.

NVD data is used under its public data terms. This service is not endorsed or certified by NVD.

18,947 CVE recordsPage 317 of 1264 · EPSS data 2026.07.28

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office 365 for Mac

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Office 2019

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office 365 for Mac

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Office 2019

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2019

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office 365 for Mac

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Office 2019

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2019

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Office 2019

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2019

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Office 2019

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office 365 for Mac

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Microsoft Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Office 2019

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

The CVSS severity warrants an early asset and exposure review.