CVE-2026-72976
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVSS
5.0
Medium
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Sep 8, 2026 · Last modified: Sep 8, 2026 · CWE-125
Not enough EPSS history yet.
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-877364.3 MED—
———An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.5hCVE-2026-816465.9 MED—
———Out-of-bounds read vulnerability in the graphics module.
Impact: Successful exploitation of this vulnerability may affect availability.6hCVE-2026-493147.3 HIG—
———OOB write vulnerability in the rendering and composition module.
Impact: Successful exploitation of this vulnerability may affect availability.6hCVE-2026-87650——
———Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)9hCVE-2026-87640——
———Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)9hCVE-2026-87604——
———Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)9h