Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-55045)

  - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-47290, CVE-2026-50314, CVE-2026-50467, CVE-2026-55018)

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-50301, CVE-2026-55017, CVE-2026-55049, CVE-2026-55056, CVE-2026-55125, CVE-2026-55129,     CVE-2026-55140)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Office Products are missing a security update. They are, therefore, affected by multiple vulnerabilities:

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-55045)

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code     locally. (CVE-2026-50301, CVE-2026-55017, CVE-2026-55049, CVE-2026-55056, CVE-2026-55125,     CVE-2026-55129, CVE-2026-55140)

  - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-47290, CVE-2026-50314, CVE-2026-50467, CVE-2026-55018)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
327595	Security Updates for Microsoft Office Products C2R (July 2026)	Nessus	Windows	Local	medium
326874	Security Updates for Microsoft Office Products (July 2026)	Nessus	Windows : Microsoft Bulletins	Local	medium

Detections

Analytics

CVE-2026-55017

high

Tenable Plugins

medium

medium