Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 5 products
3 CVEs in Microsoft's September 2026 Security Update. CVE-2026-80076 CVE-2026-80078 CVE-2026-80082 Really proud of this one. A lot of reversing, debugging, and research went into these. POCs coming soon… or maybe not, haha.
Post summary
Microsoft disclosed three CVEs in its September 2026 security update; while PoCs are anticipated, no exploit, patch, or detailed vulnerability information has been supplied.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80076 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80082 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80078
Post summary
The provided URLs link to Microsoft vendor advisory pages that likely contain patch or workaround details for the listed CVEs, but no additional exploitation or technical information is explicitly stated.
11 of 11 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | 365_apps | - | - | x64 |
| App | microsoft | 365_apps | - | - | x86 |
| App | microsoft | microsoft_365 | - | macos | - |
| App | microsoft | office_2019 | - | - | x64 |
| App | microsoft | office_2019 | - | - | x86 |
| App | microsoft | office_2021 | - | - | x64 |
| App | microsoft | office_2021 | - | - | x86 |
| App | microsoft | office_2021 | - | macos | - |
| App | microsoft | office_2024 | - | - | x64 |
| App | microsoft | office_2024 | - | - | x86 |
| App | microsoft | office_2024 | - | macos | - |