| CVE-2026-21258 | 中5.5 | Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 10/02/2026 |
| CVE-2026-21509KEV | 高7.8 | Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally. | 26/01/2026 |
| CVE-2026-20957 | 高7.8 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2026-20956 | 高7.8 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2026-20955 | 高7.8 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2026-20953 | 高8.4 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2026-20952 | 高8.4 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2026-20950 | 高7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2026-20949 | 高7.8 | Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally. | 13/01/2026 |
| CVE-2026-20948 | 高7.8 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2026-20946 | 高7.8 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2026-20944 | 高8.4 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2025-62564 | 高7.8 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62563 | 高7.8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62562 | 高7.8 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62561 | 高7.8 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62560 | 高7.8 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62559 | 高7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62558 | 高7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62557 | 高7.8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 09/12/2025 |