| CVE-2026-45467 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 09/06/2026 |
| CVE-2026-45465 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 09/06/2026 |
| CVE-2026-45464 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 09/06/2026 |
| CVE-2026-45462 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 09/06/2026 |
| CVE-2026-45458 | 高8.4 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 09/06/2026 |
| CVE-2026-45456 | 高8.4 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally. | 09/06/2026 |
| CVE-2026-45454 | 高8.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 09/06/2026 |
| CVE-2026-45453 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 09/06/2026 |
| CVE-2026-44824 | 高7.8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 09/06/2026 |
| CVE-2026-44821 | 中5.5 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 09/06/2026 |
| CVE-2026-44819 | 高7.8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 09/06/2026 |
| CVE-2026-33113 | 中6.1 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 09/06/2026 |
| CVE-2026-47294 | 高8.0 | Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 01/06/2026 |
| CVE-2026-45659KEV | 高8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 22/05/2026 |
| CVE-2026-40368 | 高8.0 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 12/05/2026 |
| CVE-2026-40367 | 高8.4 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 12/05/2026 |
| CVE-2026-40365 | 高8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 12/05/2026 |
| CVE-2026-40357 | 高8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 12/05/2026 |
| CVE-2026-35439 | 高8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 12/05/2026 |
| CVE-2026-33112 | 高8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 12/05/2026 |