cbcvebase.

Microsoft Office 2019 vulnerabilities

695 known vulnerabilities affecting microsoft/microsoft_office_2019.

Total CVEs
695
CISA KEV
9
actively exploited
Public exploits
13
Exploited in wild
12
Severity breakdown
CRITICAL8HIGH522MEDIUM158LOW7

Vulnerabilities

Page 21 of 35
CVE-2025-62556P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-12-09
CVE-2025-62556 [HIGH] CWE-822 CVE-2025-62556: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62564P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-12-09
CVE-2025-62564 [HIGH] CWE-125 CVE-2025-62564: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62560P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-12-09
CVE-2025-62560 [HIGH] CWE-126 CVE-2025-62560: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62561P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-12-09
CVE-2025-62561 [HIGH] CWE-822 CVE-2025-62561: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-70313P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-08-11
CVE-2026-70313 [HIGH] CWE-20 CVE-2026-70313: Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-64910P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-08-11
CVE-2026-64910 [HIGH] CWE-822 CVE-2026-64910: Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-44820P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-44820 [HIGH] CWE-125 CVE-2026-44820: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-45645P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45645 [HIGH] CWE-822 CVE-2026-45645: Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2019-1200P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2019-08-14
CVE-2019-1200 [HIGH] CVE-2019-1200: A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user wi
nvd
CVE-2019-1155P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2019-08-14
CVE-2019-1155 [HIGH] CVE-2019-1155: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerabili
nvd
CVE-2021-1711P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-01-12
CVE-2021-1711 [HIGH] CVE-2021-1711: Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2020-17119P3HIGHCVSS 7.5≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2020-12-10
CVE-2020-17119 [HIGH] CVE-2020-17119: Microsoft Outlook Information Disclosure Vulnerability Microsoft Outlook Information Disclosure Vulnerability
nvd
CVE-2022-24509P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2022-03-09
CVE-2022-24509 [HIGH] CVE-2022-24509: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2022-24461P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2022-03-09
CVE-2022-24461 [HIGH] CVE-2022-24461: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2022-24510P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2022-03-09
CVE-2022-24510 [HIGH] CVE-2022-24510: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2022-21988P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2022-02-09
CVE-2022-21988 [HIGH] CVE-2022-21988: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2021-31941P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-06-08
CVE-2021-31941 [HIGH] CVE-2021-31941: Microsoft Office Graphics Remote Code Execution Vulnerability Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2021-24108P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-03-11
CVE-2021-24108 [HIGH] CVE-2021-24108: Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2022-21841P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2022-01-11
CVE-2022-21841 [HIGH] CVE-2022-21841: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2021-24069P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-02-25
CVE-2021-24069 [HIGH] CVE-2021-24069: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability
nvd
Microsoft Office 2019 vulnerabilities | cvebase