CVE-2026-83971 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and affects multiple Windows 10 builds prior to specific patched versions. An official fix is available from Microsoft.
CVE-2026-77906 is a heap-based buffer overflow vulnerability in Microsoft Visual Studio 2026 version 18.9 that allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects versions 18.9.0 through 18.9.2 and has been assigned a high severity score of 8.8. An official fix is available in version 18.9.3.
CVE-2026-81948 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on affected systems. The vulnerability has a high severity rating and has been officially fixed in multiple versions of the software.
CVE-2026-81959 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on the affected system. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise prior to the fixed releases. A high-severity CVSS 3.1 score of 7.8 reflects the potential for code execution with high impact on confidentiality, integrity, and availability. Microsoft has issued official fixes for this vulnerability.
CVE-2026-81952 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This vulnerability allows an unauthorized attacker to execute code remotely over a network. The issue affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. A high-severity fix has been officially released by Microsoft.
CVE-2026-81951 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on the affected system. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. A high-severity CVSS 3.1 score of 7.8 has been assigned. Microsoft has issued official fixes for this vulnerability.
CVE-2026-81955 is a heap-based buffer overflow vulnerability in the Microsoft Graphics Component of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise and related components prior to specific fixed releases. The issue has a high severity CVSS score of 8.8 and has been officially fixed by Microsoft.
CVE-2026-81960 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Multiple affected versions prior to fixed releases are identified. An official fix is available from Microsoft.
CVE-2026-81389 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on affected systems. The vulnerability has a high severity score and affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. An official fix is available from Microsoft, and the vendor manages remediation for this cloud-hosted service.
CVE-2026-81397 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Multiple affected versions prior to specific fixed releases are identified. An official fix is available from Microsoft.
CVE-2026-81947 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Multiple affected versions prior to fixed releases have been identified. Official patches are available from Microsoft to address this issue.
CVE-2026-81386 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on affected systems. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for multiple affected versions of the software.
CVE-2026-81398 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on the affected system. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. A high-severity issue with a CVSS score of 7.8, it requires user interaction to exploit and has an official fix available from Microsoft.
CVE-2026-81354 is a heap-based buffer overflow vulnerability in Windows Hello on Microsoft Windows 10 Version 1809 and later builds. It allows an authorized local attacker with high privileges to elevate their privileges further. The vulnerability has a high severity with a CVSS score of 8.2. Official patches have been released to address this issue.
CVE-2026-81353 is a heap-based buffer overflow vulnerability in the Microsoft HEIF Image Extension component of the Windows Codecs Library. This flaw allows an unauthorized attacker to execute code locally on the affected system. The vulnerability affects versions from 1.0.0.0 up to but not including 1.2.48.0. Microsoft has released an official fix in version 1.2.48.0. The vulnerability has a high severity rating with a CVSS score of 7.8.
CVE-2026-81352 is a heap-based buffer overflow vulnerability in the Microsoft Windows Codecs Library component of Web Media Extensions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects versions 1.0.0.0 up to but not including 1.2.42.0. An official fix is available in version 1.2.42.0. The vulnerability has a high severity with a CVSS score of 8.8.
CVE-2026-80085 is a heap-based buffer overflow vulnerability in Microsoft Office Word, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. Microsoft has issued official fixes for the affected versions. There are no known exploits in the wild at this time.
CVE-2026-80087 is a heap-based buffer overflow vulnerability in Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. Multiple affected versions exist, but official fixes have been released. The vulnerability requires user interaction and does not allow privilege escalation or denial of service.
CVE-2026-78526 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. Microsoft has issued official fixes for the affected versions. The CVSS v3.1 base score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. No known exploits in the wild have been reported as of the publication date.
CVE-2026-78521 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for the affected versions. The vulnerability has a high severity rating with a CVSS score of 8.8. No known exploits in the wild have been reported at this time.