| CVE-2026-33110 | 高8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 12/05/2026 |
| CVE-2026-32201KEV | 中6.5 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 14/04/2026 |
| CVE-2026-20945 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 14/04/2026 |
| CVE-2026-26114 | 高8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 10/03/2026 |
| CVE-2026-26113 | 高7.8 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. | 10/03/2026 |
| CVE-2026-26106 | 高8.8 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 10/03/2026 |
| CVE-2026-26105 | 緊急9.3 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. | 10/03/2026 |
| CVE-2026-21511 | 高7.5 | Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. | 10/02/2026 |
| CVE-2026-21260 | 高7.5 | Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. | 10/02/2026 |
| CVE-2026-20963KEV | 緊急9.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. | 13/01/2026 |
| CVE-2026-20959 | 中5.4 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 13/01/2026 |
| CVE-2026-20958 | 中5.4 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. | 13/01/2026 |
| CVE-2026-20951 | 高7.8 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2026-20948 | 高7.8 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2026-20947 | 高8.8 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | 13/01/2026 |
| CVE-2026-20943 | 高7.0 | Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally. | 13/01/2026 |
| CVE-2025-64672 | 緊急9.0 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 09/12/2025 |
| CVE-2025-62562 | 高7.8 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62559 | 高7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |
| CVE-2025-62558 | 高7.8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 09/12/2025 |