Microsoft Makers of the Windows Operating System and hundreds of products that run on it.

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Microsoft product.

RSS Feeds for Microsoft security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Microsoft products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Microsoft Sorted by Most Security Vulnerabilities since 2018

Microsoft Windows 107379 vulnerabilities

Microsoft Windows Server 20197069 vulnerabilities

Microsoft Windows Server 20166665 vulnerabilities

Microsoft Windows Server 20225550 vulnerabilities

Microsoft Windows Server 20124676 vulnerabilities

Microsoft Windows Server 20254275 vulnerabilities

Microsoft Windows 11 24h24169 vulnerabilities

Microsoft Windows 11 23h23995 vulnerabilities

Microsoft Windows 11 25h23334 vulnerabilities

Microsoft Windows 11 26h13162 vulnerabilities

Microsoft Windows Server 2012 R22919 vulnerabilities

Microsoft Windows Server 20082821 vulnerabilities

Microsoft Windows 112283 vulnerabilities

Microsoft Windows 71812 vulnerabilities

Microsoft Windows 8.11716 vulnerabilities

Microsoft Windows 10 15071686 vulnerabilities

Microsoft Windows Rt 8 11593 vulnerabilities

Microsoft Windows 11 Version 26h2 Arm64 Based Systems1444 vulnerabilities

Microsoft Windows Server 23h21433 vulnerabilities

Microsoft Windows Server 2022 23h21115 vulnerabilities

Microsoft Windows Server 2008 R21109 vulnerabilities

Microsoft 365 Apps1061 vulnerabilities

Microsoft Windows934 vulnerabilities

Microsoft Windows Server 2008 Sp2912 vulnerabilities

Microsoft Office 2024790 vulnerabilities

Microsoft Office 2021786 vulnerabilities

Microsoft Office Macos 2021660 vulnerabilities

Microsoft Office Macos 2024656 vulnerabilities

Microsoft Windows Server655 vulnerabilities

Microsoft Office614 vulnerabilities

Microsoft Sharepoint Server587 vulnerabilities

Microsoft Internet Explorer (IE)528 vulnerabilities
Popular web browser for windows

Microsoft Windows 10 1909523 vulnerabilities

Microsoft Office 2019509 vulnerabilities

Microsoft Office 365509 vulnerabilities

Microsoft Windows Server 2004434 vulnerabilities

Microsoft Edge Browser429 vulnerabilities
Web Browser based on Chromium

Microsoft Windows Server 20h2403 vulnerabilities

Microsoft Windows Vista382 vulnerabilities

Microsoft Windows Server 1909344 vulnerabilities

Microsoft Edge Chromium339 vulnerabilities

Microsoft Windows XP326 vulnerabilities

Microsoft Windows Server 1903317 vulnerabilities

Microsoft Windows 10 1803279 vulnerabilities

Microsoft Windows 10 21h1274 vulnerabilities

Microsoft Windows Server 2003262 vulnerabilities

Microsoft Sql Server 2019256 vulnerabilities

Microsoft Sql Server 2022233 vulnerabilities

Microsoft Office Long Term Servicing Channel220 vulnerabilities

Microsoft Visual Studio 2022207 vulnerabilities

Microsoft Sharepoint Server 2019206 vulnerabilities

Microsoft Sharepoint Server 2016200 vulnerabilities

Microsoft Sql Server 2017196 vulnerabilities

Microsoft Excel194 vulnerabilities
Spreadsheet Software

Microsoft Excel 2016184 vulnerabilities

Microsoft Net180 vulnerabilities

Microsoft Windows Server 1803171 vulnerabilities

Microsoft Office 2016168 vulnerabilities

Microsoft Windows 2003 Server162 vulnerabilities

Microsoft Windows 11 Version 26h2 X64 Based Systems152 vulnerabilities

Microsoft Sql Server 2025143 vulnerabilities

Microsoft Office Online Server135 vulnerabilities

Microsoft Exchange Server132 vulnerabilities

Microsoft Visual Studio 2019126 vulnerabilities

Microsoft Visual Studio Code120 vulnerabilities
VSCode Developer IDE

Microsoft Windows 2000112 vulnerabilities

Microsoft Windows 11 2h2110 vulnerabilities

Microsoft SQL Server106 vulnerabilities
Database Server

Microsoft Dynamics 365105 vulnerabilities

Microsoft Word104 vulnerabilities

Microsoft Sql Server 201697 vulnerabilities

Microsoft Visual Studio97 vulnerabilities
Developer IDE

Microsoft Visual Studio 201797 vulnerabilities

Microsoft Word 201694 vulnerabilities

Microsoft Office 365 Proplus87 vulnerabilities

Microsoft Outlook86 vulnerabilities

Microsoft Sql Server 2022 X64 Based Systems Cu2771 vulnerabilities

Microsoft Sql Server 2019 X64 Based Systems Cu3264 vulnerabilities

Microsoft .NET Framework63 vulnerabilities

Microsoft Office Compatibility Pack61 vulnerabilities

Microsoft Windows 861 vulnerabilities

Microsoft Sql Server 2017 X64 Based Systems Cu3159 vulnerabilities

Microsoft Powershell58 vulnerabilities

Microsoft Windows Nt57 vulnerabilities

Microsoft Exchange Server 201657 vulnerabilities

Microsoft Exchange Server Se55 vulnerabilities

Microsoft Office Web Apps55 vulnerabilities

Microsoft Azure Site Recovery53 vulnerabilities

Microsoft Exchange Server 201951 vulnerabilities

Microsoft Sql Server 2025 X64 Based Systems Cu1051 vulnerabilities

Microsoft Hevc Video Extensions47 vulnerabilities

Microsoft ASP.NET Core46 vulnerabilities

Microsoft Windows Rt46 vulnerabilities

Microsoft Azure Devops Server42 vulnerabilities

Microsoft Office Web Apps Server42 vulnerabilities

Microsoft Visual Studio 202642 vulnerabilities

Microsoft Http Server41 vulnerabilities

Microsoft Windows 10 170940 vulnerabilities

Microsoft Visual Studio 2026 Version 18 1040 vulnerabilities

Microsoft Remote Desktop39 vulnerabilities

Recent Microsoft Security Advisories

Advisory	Title	Published
CVE-2026-114147	CVE-2026-114147 ASP.NET Core Denial of Service Vulnerability	November 11, 2026
CVE-2026-114150	CVE-2026-114150 ASP.NET Core Information Disclosure Vulnerability	November 11, 2026
CVE-2026-114146	CVE-2026-114146 ASP.NET Core Elevation of Privilege Vulnerability	November 11, 2026
CVE-2026-114154	CVE-2026-114154 ASP.NET Core Denial of Service Vulnerability	November 11, 2026
CVE-2026-114156	CVE-2026-114156 ASP.NET Core Security Feature Bypass Vulnerability	November 11, 2026
CVE-2026-114157	CVE-2026-114157 ASP.NET Core Security Feature Bypass Vulnerability	November 11, 2026
CVE-2026-114149	CVE-2026-114149 ASP.NET Core Denial of Service Vulnerability	November 11, 2026
CVE-2026-114152	CVE-2026-114152 Visual Studio Remote Code Execution Vulnerability	November 11, 2026
CVE-2026-114155	CVE-2026-114155 .NET Elevation of Privilege Vulnerability	November 11, 2026
CVE-2026-114151	CVE-2026-114151 Visual Studio Remote Code Execution Vulnerability	November 11, 2026

Known Exploited Microsoft Vulnerabilities

The following Microsoft vulnerabilities have recently been marked by CISA as Known to be Exploited by threat actors.

Title	Description	Added
Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability	Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network. CVE-2026-124194 Exploit Probability: 1.6%	November 10, 2026
Microsoft Windows Command Injection Vulnerability	Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-96951 Exploit Probability: 9.8%	October 13, 2026
Microsoft SharePoint Code Injection Vulnerability	Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network. CVE-2026-65660 Exploit Probability: 9.9%	September 25, 2026
Microsoft Windows Heap-Based Buffer Overflow Vulnerability	Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally. CVE-2026-85880 Exploit Probability: 0.4%	September 8, 2026
Microsoft Windows Link Following Vulnerability	Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM. CVE-2026-81963 Exploit Probability: 7.1%	September 8, 2026
Microsoft SQL Server Remote Code Execution Vulnerability	Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account. CVE-2019-1068 Exploit Probability: 57.3%	August 26, 2026
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability	Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution. CVE-2026-33824 Exploit Probability: 77.4%	August 18, 2026
Microsoft SharePoint Weak Authentication Vulnerability	Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-55040 Exploit Probability: 69.5%	August 18, 2026
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability	Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. CVE-2026-68820 Exploit Probability: 8.6%	August 11, 2026
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability	Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network. CVE-2026-50522 Exploit Probability: 3.0%	July 22, 2026
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability	Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network. CVE-2026-58644 Exploit Probability: 15.9%	July 16, 2026
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability	Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network. CVE-2026-56164 Exploit Probability: 1.0%	July 14, 2026
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerabil	Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally. CVE-2026-56155 Exploit Probability: 0.3%	July 14, 2026
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability	Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network. CVE-2026-45659 Exploit Probability: 80.2%	July 1, 2026
Microsoft DirectX NULL Byte Overwrite Vulnerability	Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file. CVE-2009-1537 Exploit Probability: 51.1%	May 20, 2026
Microsoft Defender Denial of Service Vulnerability	Microsoft Defender contains an unspecified vulnerability that allows for denial of service. CVE-2026-45498 Exploit Probability: 63.1%	May 20, 2026
Microsoft Windows Buffer Overflow Vulnerability	Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization. CVE-2008-4250 Exploit Probability: 98.8%	May 20, 2026
Microsoft Internet Explorer Use-After-Free Vulnerability	Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. CVE-2010-0249 Exploit Probability: 91.9%	May 20, 2026
Microsoft Defender Link Following Vulnerability	Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally. CVE-2026-41091 Exploit Probability: 8.2%	May 20, 2026
Microsoft Internet Explorer Use-After-Free Vulnerability	Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. CVE-2010-0806 Exploit Probability: 82.1%	May 20, 2026

Of the known exploited vulnerabilities above, 8 are in the top 1%, or the 99th percentile of the EPSS exploit probability rankings. 5 known exploited Microsoft vulnerabilities are in the top 5% (95th percentile or greater) of the EPSS exploit probability rankings.

Top 10 Riskiest Microsoft Vulnerabilities

Based on the current exploit probability, these Microsoft vulnerabilities are on CISA's Known Exploited vulnerabilities list (KEV) and are ranked by the current EPSS exploit probability.

Rank	CVE	EPSS	Vulnerability
1	CVE-2021-34473	100.0%	Microsoft Exchange Server Remote Code Execution Vulnerability
2	CVE-2019-0708	100.0%	"BlueKeep" Microsoft Windows Remote Desktop Remote Code Execution Vulnerability
3	CVE-2015-1635	100.0%	Microsoft HTTP.sys Remote Code Execution Vulnerability
4	CVE-2025-53770	100.0%	Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
5	CVE-2021-26855	100.0%	Microsoft OWA Exchange Control Panel (ECP) Exploit Chain
6	CVE-2025-49704	100.0%	Microsoft SharePoint Code Injection Vulnerability
7	CVE-2021-34523	100.0%	Microsoft Exchange Server Privilege Escalation Vulnerability
8	CVE-2023-29357	100.0%	Microsoft SharePoint Server Privilege Escalation Vulnerability
9	CVE-2025-59287	100.0%	Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
10	CVE-2012-0158	100.0%	Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

By the Year

In 2026 there have been 9874 vulnerabilities in Microsoft with an average score of 7.3 out of ten. Last year, in 2025 Microsoft had 2759 security vulnerabilities published. That is, 7115 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.06.

Year	Vulnerabilities	Average Score
2026	9874	7.28
2025	2759	7.23
2024	2182	7.39
2023	1695	7.21
2022	1389	7.43
2021	1153	7.44
2020	1253	7.19
2019	831	7.08
2018	661	7.03

It may take a day or so for new Microsoft vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Microsoft Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-120003	Nov 10, 2026	Nov 2026: Microsoft Office Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-120002	Nov 10, 2026	Nov 2026: Microsoft SharePoint Server Elevation of Privilege Vulnerability Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.	Sharepoint Server
CVE-2026-120000	Nov 10, 2026	Nov 2026: Microsoft Office SharePoint Remote Code Execution Vulnerability Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.	Sharepoint Server
CVE-2026-120001	Nov 10, 2026	Nov 2026: Microsoft Office PowerPoint Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-119998	Nov 10, 2026	Nov 2026: Microsoft Office Security Feature Bypass Vulnerability Product ui does not warn user of unsafe actions in Microsoft Office allows an unauthorized attacker to bypass a security feature over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-119999	Nov 10, 2026	Nov 2026: Microsoft Office Excel Information Disclosure Vulnerability Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.	Office 2021 Office Macos 2021 Office Macos 2024 And others...
CVE-2026-119996	Nov 10, 2026	Nov 2026: Microsoft Office Outlook Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-119997	Nov 10, 2026	Nov 2026: Microsoft Office Outlook Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-119995	Nov 10, 2026	Nov 2026: Microsoft Office Outlook Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-119993	Nov 10, 2026	Nov 2026: Microsoft Office Outlook Information Disclosure Vulnerability Access of resource using incompatible type ('type confusion') in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-118732	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118731	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118729	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-118730	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118728	Nov 10, 2026	Nov 2026: Microsoft Office Excel Information Disclosure Vulnerability Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-118726	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118727	Nov 10, 2026	Nov 2026: Microsoft Office Excel Information Disclosure Vulnerability Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-118725	Nov 10, 2026	Nov 2026: Microsoft Office Excel Elevation of Privilege Vulnerability Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118724	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-118723	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-118722	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-118721	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-118720	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118719	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-118718	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118717	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-118716	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118715	Nov 10, 2026	Nov 2026: Microsoft Office Excel Elevation of Privilege Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118714	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118713	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118712	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-118711	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118709	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118710	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118708	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118707	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118706	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118705	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118704	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118703	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118702	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118701	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118700	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118302	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118301	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118300	Nov 10, 2026	Nov 2026: Microsoft Office Excel Information Disclosure Vulnerability Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118299	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...
CVE-2026-118298	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	365 Apps Office 2021 Office 2024 And others...
CVE-2026-118297	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office 2021 Office 2024 365 Apps And others...
CVE-2026-118296	Nov 10, 2026	Nov 2026: Microsoft Office Excel Remote Code Execution Vulnerability Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.	Office Macos 2021 Office Macos 2024 Office 365 And others...