CVE-2026-55131 Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55131 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55131 Microsoft US
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-55057 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-55122 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55053 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55137 Microsoft US
Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVE-2026-55132 Microsoft US
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVE-2026-55038 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55058 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55037 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-55054 Microsoft US
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVE-2026-55055 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55044 Microsoft US
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55036 Microsoft US
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-55035 Microsoft US
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55141 Microsoft US
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55136 Microsoft US
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVE-2026-55127 Microsoft US
Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-55124 Microsoft US
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-55138 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55041 Microsoft US
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVE-2026-55033 Microsoft US
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVE-2026-55032 Microsoft US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55049 Microsoft US
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55045 Microsoft US
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55039 Microsoft US
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-55047 Microsoft US
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-55028 Microsoft US
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55029 Microsoft US
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-55027 Microsoft US
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-55034 Microsoft US
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55048 Microsoft US
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-55026 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55031 Microsoft US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.01 CVE-2026-55125 Microsoft US
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-55030 Microsoft US
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55025 Microsoft US
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-55023 Microsoft US
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55022 Microsoft US
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-55021 Microsoft US
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-55020 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-55046 Microsoft US
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55018 Microsoft US
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-55019 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-50408 Microsoft US
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55024 Microsoft US
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-55016 Microsoft US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-55017 Microsoft US
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-50467 Microsoft US
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-50314 Microsoft US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-50301 Microsoft US
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-48580 Microsoft US
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-47642 Microsoft US
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
EPSS 0.00 CVE-2026-47290 Microsoft US
Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-55010 US
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-54126 US
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50692 US
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-50690 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-54125 US
Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-50689 US
Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-50686 US