The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the june-16-2026 advisory.

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-44819, CVE-2026-44824, CVE-2026-45461, CVE-2026-45463, CVE-2026-45472, CVE-2026-45474,     CVE-2026-45475, CVE-2026-45645)

  - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over     a network. (CVE-2026-44822, CVE-2026-45455)

  - Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to     execute code locally. (CVE-2026-44817, CVE-2026-44818, CVE-2026-44820, CVE-2026-44823, CVE-2026-45469)

  - Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a     security feature locally. (CVE-2026-45459)

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
    (CVE-2026-44821, CVE-2026-45460, CVE-2026-45485)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities:

  - Access of resource using incompatible type ('type confusion') in Microsoft Office allows an     unauthorized attacker to execute code locally. (CVE-2026-45456, CVE-2026-45458)

  - Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute     code locally. (CVE-2026-45471)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office     SharePoint allows an authorized attacker to perform spoofing over a network.     (CVE-2026-33113)

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-44819)

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
    (CVE-2026-44821)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office     SharePoint allows an authorized attacker to perform spoofing over a network.
    (CVE-2026-33113)

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-44819)

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
    (CVE-2026-44821)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized     attacker to execute code locally. (CVE-2026-45456, CVE-2026-45458)

  - Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code     locally. (CVE-2026-45457, CVE-2026-45471, CVE-2026-45486, CVE-2026-45643)

  - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose     information locally. (CVE-2026-45466)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office     SharePoint allows an authorized attacker to perform spoofing over a network.
    (CVE-2026-33113)

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-44819)

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
    (CVE-2026-44821)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
321311	Security Updates for Microsoft Office Products (June 2026) (macOS)	Nessus	MacOS X Local Security Checks	6/17/2026	6/22/2026	medium
320197	Security Updates for Microsoft Word Products (June 2026)	Nessus	Windows : Microsoft Bulletins	6/9/2026	6/19/2026	high
320192	Security Updates for Microsoft SharePoint Server 2019 (June 2026)	Nessus	Windows : Microsoft Bulletins	6/9/2026	7/27/2026	high
320190	Security Updates for Microsoft SharePoint Server 2016 (June 2026)	Nessus	Windows : Microsoft Bulletins	6/9/2026	7/27/2026	high
320864	Security Updates for Microsoft Word Products C2R (June 2026)	Nessus	Windows	6/12/2026	6/15/2026	high
320194	Security Updates for Microsoft SharePoint Server Subscription Edition (June 2026)	Nessus	Windows : Microsoft Bulletins	6/9/2026	7/27/2026	high

Detections

Analytics

Plugins Search

medium

high

high

high

high

high