CVE-2026-20950 by | Jan 13, 2026Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-20949 by | Jan 13, 2026Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-20948 by | Jan 13, 2026Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-20947 by | Jan 13, 2026Improper neutralization of special elements used in an sql command (‘sql injection’) in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-20946 by | Jan 13, 2026Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.