Microsoft Office 2019 vulnerabilities
696 known vulnerabilities affecting microsoft/microsoft_office_2019.
Total CVEs
696
CISA KEV
9
actively exploited
Public exploits
13
Exploited in wild
12
Severity breakdown
CRITICAL9HIGH522MEDIUM158LOW7
Vulnerabilities
Page 23 of 35
CVE-2025-21390P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-02-11
CVE-2025-21390 [HIGH] CWE-122 CVE-2025-21390: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2025-21386P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-02-11
CVE-2025-21386 [HIGH] CWE-416 CVE-2025-21386: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2025-21392P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-02-11
CVE-2025-21392 [HIGH] CWE-416 CVE-2025-21392: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2025-21394P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-02-11
CVE-2025-21394 [HIGH] CWE-416 CVE-2025-21394: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2024-38169P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-08-13
CVE-2024-38169 [HIGH] CWE-122 CVE-2024-38169: Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2025-26642P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-04-08
CVE-2025-26642 [HIGH] CWE-125 CVE-2025-26642: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2024-43616P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-10-08
CVE-2024-43616 [HIGH] CWE-426 CVE-2024-43616: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2024-49027P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-11-12
CVE-2024-49027 [HIGH] CWE-416 CVE-2024-49027: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2024-49028P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-11-12
CVE-2024-49028 [HIGH] CWE-125 CVE-2024-49028: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2024-49030P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-11-12
CVE-2024-49030 [HIGH] CWE-122 CVE-2024-49030: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2024-49029P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-11-12
CVE-2024-49029 [HIGH] CWE-908 CVE-2024-49029: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2024-43505P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-10-08
CVE-2024-43505 [HIGH] CWE-357 CVE-2024-43505: Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2025-21356P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-01-14
CVE-2025-21356 [HIGH] CWE-122 CVE-2025-21356: Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2025-30375P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-05-13
CVE-2025-30375 [HIGH] CWE-843 CVE-2025-30375: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-54902P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-09-09
CVE-2025-54902 [HIGH] CWE-125 CVE-2025-54902: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-54898P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-09-09
CVE-2025-54898 [HIGH] CWE-125 CVE-2025-54898: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-53739P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-08-12
CVE-2025-53739 [HIGH] CWE-843 CVE-2025-53739: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-30383P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-05-13
CVE-2025-30383 [HIGH] CWE-843 CVE-2025-30383: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-40360P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-05-12
CVE-2026-40360 [HIGH] CWE-125 CVE-2026-40360: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2020-1581P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2020-08-17
CVE-2020-1581 [HIGH] CVE-2020-1581: An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) c
An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the system.
An attacker could exploit this vulnerability by running a spe
nvd