| CVE-2026-33110 | ÉLEVÉE8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 12/05/2026 |
| CVE-2026-32201KEV | MOYENNE6.5 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 14/04/2026 |
| CVE-2026-20945 | MOYENNE5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14/04/2026 |
| CVE-2026-26114 | ÉLEVÉE8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 10/03/2026 |
| CVE-2026-26113 | ÉLEVÉE7.8 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. | 10/03/2026 |
| CVE-2026-26106 | ÉLEVÉE8.8 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 10/03/2026 |
| CVE-2026-26105 | CRITIQUE9.3 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 10/03/2026 |
| CVE-2026-21511 | ÉLEVÉE7.5 | Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. | 10/02/2026 |
| CVE-2026-21260 | ÉLEVÉE7.5 | Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. | 10/02/2026 |
| CVE-2026-20963KEV | CRITIQUE9.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 13/01/2026 |
| CVE-2026-20959 | MOYENNE5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 13/01/2026 |
| CVE-2026-20958 | MOYENNE5.4 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 13/01/2026 |
| CVE-2026-20951 | ÉLEVÉE7.8 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2026-20948 | ÉLEVÉE7.8 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2026-20947 | ÉLEVÉE8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 13/01/2026 |
| CVE-2026-20943 | ÉLEVÉE7.0 | Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2025-64672 | CRITIQUE9.0 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 09/12/2025 |
| CVE-2025-62562 | ÉLEVÉE7.8 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62559 | ÉLEVÉE7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62558 | ÉLEVÉE7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |