Microsoft Office 2019 vulnerabilities
696 known vulnerabilities affecting microsoft/microsoft_office_2019.
Total CVEs
696
CISA KEV
9
actively exploited
Public exploits
13
Exploited in wild
12
Severity breakdown
CRITICAL9HIGH522MEDIUM158LOW7
Vulnerabilities
Page 24 of 35
CVE-2020-16955P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2020-10-16
CVE-2020-16955 [HIGH] CVE-2020-16955: <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R
An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.
To exploit this vulnerability, an attacker would need to convince a user to open a specially crafted file.
The security update addresses the vulnerab
nvd
CVE-2020-16928P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2020-10-16
CVE-2020-16928 [HIGH] CVE-2020-16928: <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R
An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.
To exploit this vulnerability, an attacker would need to convince a user to open a specially crafted file.
The security update addresses the vulnerab
nvd
CVE-2020-17067P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2020-11-11
CVE-2020-17067 [HIGH] CVE-2020-17067: Microsoft Excel Security Feature Bypass Vulnerability
Microsoft Excel Security Feature Bypass Vulnerability
nvd
CVE-2020-17119P3HIGHCVSS 7.5≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2020-12-10
CVE-2020-17119 [HIGH] CVE-2020-17119: Microsoft Outlook Information Disclosure Vulnerability
Microsoft Outlook Information Disclosure Vulnerability
nvd
CVE-2021-24108P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-03-11
CVE-2021-24108 [HIGH] CVE-2021-24108: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2021-28449P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-04-13
CVE-2021-28449 [HIGH] CVE-2021-28449: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2022-22003P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2022-02-09
CVE-2022-22003 [HIGH] CVE-2022-22003: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2021-31180P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-05-11
CVE-2021-31180 [HIGH] CVE-2021-31180: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2021-31940P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-06-08
CVE-2021-31940 [HIGH] CVE-2021-31940: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2023-36569P3HIGHCVSS 8.4≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-10-10
CVE-2023-36569 [HIGH] CWE-269 CVE-2023-36569: Microsoft Office Elevation of Privilege Vulnerability
Microsoft Office Elevation of Privilege Vulnerability
nvd
CVE-2024-20673P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-02-13
CVE-2024-20673 [HIGH] CWE-693 CVE-2024-20673: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2023-36763P3HIGHCVSS 7.5≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-09-12
CVE-2023-36763 [HIGH] CWE-200 CVE-2023-36763: Microsoft Outlook Information Disclosure Vulnerability
Microsoft Outlook Information Disclosure Vulnerability
nvd
CVE-2023-36896P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-08-08
CVE-2023-36896 [HIGH] CWE-122 CVE-2023-36896: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2024-49032P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-11-12
CVE-2024-49032 [HIGH] CWE-416 CVE-2024-49032: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2022-41063P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2022-11-09
CVE-2022-41063 [HIGH] CVE-2022-41063: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2025-29822P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-04-08
CVE-2025-29822 [HIGH] CWE-184 CVE-2025-29822: Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2024-49031P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-11-12
CVE-2024-49031 [HIGH] CWE-126 CVE-2024-49031: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2023-28295P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-06-17
CVE-2023-28295 [HIGH] CWE-190 CVE-2023-28295: Microsoft Publisher Remote Code Execution Vulnerability
Microsoft Publisher Remote Code Execution Vulnerability
nvd
CVE-2023-28287P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-06-17
CVE-2023-28287 [HIGH] CWE-416 CVE-2023-28287: Microsoft Publisher Remote Code Execution Vulnerability
Microsoft Publisher Remote Code Execution Vulnerability
nvd
CVE-2023-24953P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-05-09
CVE-2023-24953 [HIGH] CWE-416 CVE-2023-24953: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd