The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-44819, CVE-2026-44824, CVE-2026-45461, CVE-2026-45463, CVE-2026-45472, CVE-2026-45474,     CVE-2026-45475, CVE-2026-45645)

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
    (CVE-2026-44821, CVE-2026-45460, CVE-2026-45485)

  - Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized     attacker to execute code locally. (CVE-2026-47635)

  - Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges     locally. (CVE-2026-47293)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office     SharePoint allows an authorized attacker to perform spoofing over a network.     (CVE-2026-33113)

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-44819)

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
    (CVE-2026-44821)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office     SharePoint allows an authorized attacker to perform spoofing over a network.
    (CVE-2026-33113)

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-44819)

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
    (CVE-2026-44821)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the june-16-2026 advisory.

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-44819, CVE-2026-44824, CVE-2026-45461, CVE-2026-45463, CVE-2026-45472, CVE-2026-45474,     CVE-2026-45475, CVE-2026-45645)

  - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over     a network. (CVE-2026-44822, CVE-2026-45455)

  - Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to     execute code locally. (CVE-2026-44817, CVE-2026-44818, CVE-2026-44820, CVE-2026-44823, CVE-2026-45469)

  - Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a     security feature locally. (CVE-2026-45459)

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
    (CVE-2026-44821, CVE-2026-45460, CVE-2026-45485)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Office Products are missing a security update. They are, therefore, affected by multiple vulnerabilities:

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code     locally. (CVE-2026-44819, CVE-2026-44824, CVE-2026-45461, CVE-2026-45463, CVE-2026-45472,     CVE-2026-45474, CVE-2026-45475, CVE-2026-45645)

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information     locally. (CVE-2026-44821, CVE-2026-45485)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office     SharePoint allows an authorized attacker to perform spoofing over a network.
    (CVE-2026-33113)

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-44819)

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
    (CVE-2026-44821)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
320866	Security Updates for Microsoft Office Products C2R (June 2026)	Nessus	Windows	6/12/2026	7/10/2026	high
320192	Security Updates for Microsoft SharePoint Server 2019 (June 2026)	Nessus	Windows : Microsoft Bulletins	6/9/2026	7/27/2026	high
320190	Security Updates for Microsoft SharePoint Server 2016 (June 2026)	Nessus	Windows : Microsoft Bulletins	6/9/2026	7/27/2026	high
321311	Security Updates for Microsoft Office Products (June 2026) (macOS)	Nessus	MacOS X Local Security Checks	6/17/2026	6/22/2026	medium
320196	Security Updates for Microsoft Office Products (June 2026)	Nessus	Windows : Microsoft Bulletins	6/9/2026	6/12/2026	high
320194	Security Updates for Microsoft SharePoint Server Subscription Edition (June 2026)	Nessus	Windows : Microsoft Bulletins	6/9/2026	7/27/2026	high

Detections

Analytics

Plugins Search

high

high

high

medium

high

high