7.8
CVE-2026-64909
- EPSS 0.34%
- Veröffentlicht 11.08.2026 17:06:40
- Zuletzt bearbeitet 14.08.2026 17:47:20
- CVE-Watchlists
- Unerledigt
Microsoft Office Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Microsoft 365 Version- SwPlatformmacos
Microsoft ≫ Office 2016 Version- SwEdition- HwPlatformx64
Microsoft ≫ Office 2016 Version- SwEdition- HwPlatformx86
Microsoft ≫ Office 2019 Version- HwPlatformx64
Microsoft ≫ Office 2019 Version- HwPlatformx86
Microsoft ≫ Office 2021 Version- SwEditionltsc SwPlatform- HwPlatformx64
Microsoft ≫ Office 2021 Version- SwEditionltsc SwPlatform- HwPlatformx86
Microsoft ≫ Office 2021 Version- SwEditionltsc SwPlatformmacos HwPlatform-
Microsoft ≫ Office 2024 Version- SwEditionltsc SwPlatform- HwPlatformx64
Microsoft ≫ Office 2024 Version- SwEditionltsc SwPlatform- HwPlatformx86
Microsoft ≫ Office 2024 Version- SwEditionltsc SwPlatformmacos HwPlatform-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.34% | 0.271 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Microsoft | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-122 Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-191 Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64909