| CVE-2026-55033 | ALTO7.8 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-55032 | ALTO7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/07/2026 |
| CVE-2026-45471 | ALTO7.8 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/06/2026 |
| CVE-2026-45458 | ALTO8.4 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 09/06/2026 |
| CVE-2026-42832 | MEDIO5.5 | Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally. | 12/05/2026 |
| CVE-2026-41101 | MEDIO5.5 | Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. | 12/05/2026 |
| CVE-2026-40421 | MEDIO4.3 | Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 12/05/2026 |
| CVE-2026-40367 | ALTO8.4 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 12/05/2026 |
| CVE-2026-40366 | ALTO8.4 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 12/05/2026 |
| CVE-2026-40364 | ALTO8.4 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 12/05/2026 |
| CVE-2026-40361 | ALTO8.4 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 12/05/2026 |
| CVE-2026-35440 | MEDIO5.5 | Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 12/05/2026 |
| CVE-2026-26133 | ALTO7.1 | AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. | 16/03/2026 |
| CVE-2026-21511 | ALTO7.5 | Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. | 10/02/2026 |
| CVE-2026-20948 | ALTO7.8 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2025-62562 | ALTO7.8 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62559 | ALTO7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62558 | ALTO7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62555 | ALTO7.0 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-59222 | ALTO7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 14/10/2025 |