| CVE-2026-65660KEV | 高8.8 | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 11/08/2026 |
| CVE-2026-65658 | 高8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 11/08/2026 |
| CVE-2026-64922 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 11/08/2026 |
| CVE-2026-64921 | 高8.8 | Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | 11/08/2026 |
| CVE-2026-64920 | 高7.8 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 11/08/2026 |
| CVE-2026-64919 | 高7.8 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 11/08/2026 |
| CVE-2026-64917 | 中5.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 11/08/2026 |
| CVE-2026-64916 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 11/08/2026 |
| CVE-2026-64915 | 高7.8 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 11/08/2026 |
| CVE-2026-64914 | 高7.8 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 11/08/2026 |
| CVE-2026-64912 | 高7.8 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 11/08/2026 |
| CVE-2026-64908 | 高7.8 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 11/08/2026 |
| CVE-2026-64907 | 高7.8 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 11/08/2026 |
| CVE-2026-64906 | 高7.8 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | 11/08/2026 |
| CVE-2026-64905 | 高7.8 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 11/08/2026 |
| CVE-2026-64902 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 11/08/2026 |
| CVE-2026-64901 | 高8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 11/08/2026 |
| CVE-2026-64900 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 11/08/2026 |
| CVE-2026-64897 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 11/08/2026 |
| CVE-2026-63531 | 中5.5 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 11/08/2026 |