3.3
CVE-2026-45485
- EPSS 0.44%
- Veröffentlicht 09.06.2026 17:17:23
- Zuletzt bearbeitet 23.07.2026 08:10:00
- Erkennungen
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Microsoft 365 Version - SwPlatform macos
Microsoft ≫ Office 2016 Version - SwEdition - HwPlatform x64
Microsoft ≫ Office 2016 Version - SwEdition - HwPlatform x86
Microsoft ≫ Office 2019 Version - HwPlatform x64
Microsoft ≫ Office 2019 Version - HwPlatform x86
Microsoft ≫ Office 2021 Version - SwEdition ltsc SwPlatform - HwPlatform x64
Microsoft ≫ Office 2021 Version - SwEdition ltsc SwPlatform - HwPlatform x86
Microsoft ≫ Office 2021 Version - SwEdition ltsc SwPlatform macos HwPlatform -
Microsoft ≫ Office 2024 Version - SwEdition ltsc SwPlatform - HwPlatform x64
Microsoft ≫ Office 2024 Version - SwEdition ltsc SwPlatform - HwPlatform x86
Microsoft ≫ Office 2024 Version - SwEdition ltsc SwPlatform macos HwPlatform -
Microsoft ≫ Sharepoint Server SwEdition subscription Version < 16.0.19725.20384
Microsoft ≫ Sharepoint Server Version 2016 SwEdition enterprise
Microsoft ≫ Sharepoint Server Version 2019
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.44% | 0.36 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Microsoft | 3.3 | 1.8 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45485