| CVE-2026-55033 | ALTO7.8 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-55032 | ALTO7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-55031 | ALTO7.8 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-55030 | MEDIO5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-55029 | ALTO7.8 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-55028 | MEDIO5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 14/07/2026 |
| CVE-2026-55027 | MEDIO5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 14/07/2026 |
| CVE-2026-55026 | MEDIO5.5 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. | 14/07/2026 |
| CVE-2026-55025 | ALTO7.8 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-55024 | ALTO7.8 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-55023 | MEDIO5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 14/07/2026 |
| CVE-2026-55021 | ALTO8.7 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-55020 | MEDIO5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-55019 | MEDIO5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-55016 | MEDIO5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14/07/2026 |
| CVE-2026-54131 | ALTO7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-54124 | ALTO7.8 | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-54116 | MEDIO6.5 | Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network. | 14/07/2026 |
| CVE-2026-50658 | ALTO7.0 | Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally. | 14/07/2026 |
| CVE-2026-50657 | MEDIO5.5 | Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally. | 14/07/2026 |