Microsoft Office 2019 vulnerabilities
695 known vulnerabilities affecting microsoft/microsoft_office_2019.
Total CVEs
695
CISA KEV
9
actively exploited
Public exploits
13
Exploited in wild
12
Severity breakdown
CRITICAL8HIGH522MEDIUM158LOW7
Vulnerabilities
Page 24 of 35
CVE-2021-28449P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-04-13
CVE-2021-28449 [HIGH] CVE-2021-28449: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2022-22003P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2022-02-09
CVE-2022-22003 [HIGH] CVE-2022-22003: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2021-31180P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-05-11
CVE-2021-31180 [HIGH] CVE-2021-31180: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2021-31940P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-06-08
CVE-2021-31940 [HIGH] CVE-2021-31940: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2023-36569P3HIGHCVSS 8.4≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-10-10
CVE-2023-36569 [HIGH] CWE-269 CVE-2023-36569: Microsoft Office Elevation of Privilege Vulnerability
Microsoft Office Elevation of Privilege Vulnerability
nvd
CVE-2023-36763P3HIGHCVSS 7.5≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-09-12
CVE-2023-36763 [HIGH] CWE-200 CVE-2023-36763: Microsoft Outlook Information Disclosure Vulnerability
Microsoft Outlook Information Disclosure Vulnerability
nvd
CVE-2024-20673P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-02-13
CVE-2024-20673 [HIGH] CWE-693 CVE-2024-20673: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2023-36895P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-08-08
CVE-2023-36895 [HIGH] CWE-416 CVE-2023-36895: Microsoft Outlook Remote Code Execution Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
nvd
CVE-2023-36896P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-08-08
CVE-2023-36896 [HIGH] CWE-122 CVE-2023-36896: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2024-49032P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-11-12
CVE-2024-49032 [HIGH] CWE-416 CVE-2024-49032: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2022-41063P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2022-11-09
CVE-2022-41063 [HIGH] CVE-2022-41063: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2025-29822P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-04-08
CVE-2025-29822 [HIGH] CWE-184 CVE-2025-29822: Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2025-26642P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-04-08
CVE-2025-26642 [HIGH] CWE-125 CVE-2025-26642: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2024-49031P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-11-12
CVE-2024-49031 [HIGH] CWE-126 CVE-2024-49031: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2023-28295P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-06-17
CVE-2023-28295 [HIGH] CWE-190 CVE-2023-28295: Microsoft Publisher Remote Code Execution Vulnerability
Microsoft Publisher Remote Code Execution Vulnerability
nvd
CVE-2023-28287P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-06-17
CVE-2023-28287 [HIGH] CWE-416 CVE-2023-28287: Microsoft Publisher Remote Code Execution Vulnerability
Microsoft Publisher Remote Code Execution Vulnerability
nvd
CVE-2023-24953P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-05-09
CVE-2023-24953 [HIGH] CWE-416 CVE-2023-24953: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2025-21346P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-01-14
CVE-2025-21346 [HIGH] CWE-693 CVE-2025-21346: Microsoft Office Security Feature Bypass Vulnerability
Microsoft Office Security Feature Bypass Vulnerability
nvd
CVE-2025-24083P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-03-11
CVE-2025-24083 [HIGH] CWE-822 CVE-2025-24083: Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-21345P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-01-14
CVE-2025-21345 [HIGH] CWE-416 CVE-2025-21345: Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
nvd