office_2024 vulnerabilities
CVEs whose affected-version data names the office_2024 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
243 CVEsRSS
CVE-2026-54988Medium· 6.1Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
▾ Sunlitmicrosoft · 365_appsEPSS 0.46%via NVD
CVE-2026-50387High· 7.8Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
▾ Twilightmicrosoft · 365_copilotEPSS 0.33%via NVD
CVE-2026-55125High· 7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
▾ Twilightmicrosoft · 365_appsEPSS 0.57%via NVD