Microsoft Office 365 For Mac vulnerabilities

CVE-2026-78502 [MEDIUM] CWE-125 CVE-2026-78502: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-80076 [MEDIUM] CWE-125 CVE-2026-80076: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

CVE-2026-77911 [MEDIUM] CWE-125 CVE-2026-77911: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-80090 [MEDIUM] CWE-125 CVE-2026-80090: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-44818 [HIGH] CWE-362 CVE-2026-44818: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-72938 [MEDIUM] CWE-822 CVE-2026-72938: Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

CVE-2026-55122 [HIGH] CWE-125 CVE-2026-55122: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-66810 [MEDIUM] CWE-122 CVE-2026-66810: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose info Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-55898 [HIGH] CWE-125 CVE-2026-55898: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVE-2026-78506 [MEDIUM] CWE-170 CVE-2026-78506: Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose infor Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-55026 [MEDIUM] CWE-190 CVE-2026-55026: Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose infor Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70323 [MEDIUM] CWE-20 CVE-2026-70323: Improper input validation in Microsoft Office allows an unauthorized attacker to disclose informatio Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-70322 [MEDIUM] CWE-20 CVE-2026-70322: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70325 [MEDIUM] CWE-20 CVE-2026-70325: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70316 [MEDIUM] CWE-20 CVE-2026-70316: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70320 [MEDIUM] CWE-20 CVE-2026-70320: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

CVE-2026-70317 [MEDIUM] CWE-908 CVE-2026-70317: Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose inform Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-56192 [MEDIUM] CWE-125 CVE-2026-56192: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-55028 [MEDIUM] CWE-125 CVE-2026-55028: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2026-55124 [MEDIUM] CWE-20 CVE-2026-55124: Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attac Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.