Microsoft Office 2019 vulnerabilities
501 known vulnerabilities affecting microsoft/microsoft_office_2019.
Total CVEs
501
CISA KEV
9
actively exploited
Public exploits
13
Exploited in wild
12
Severity breakdown
CRITICAL6HIGH408MEDIUM80LOW7
Vulnerabilities
Page 25 of 26
CVE-2022-33632P4MEDIUMCVSS 4.7≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2022-07-12
CVE-2022-33632 [MEDIUM] CVE-2022-33632: Microsoft Office Security Feature Bypass Vulnerability
Microsoft Office Security Feature Bypass Vulnerability
nvd
CVE-2026-50678P4LOWCVSS 3.3≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-50678 [LOW] CWE-122 CVE-2026-50678: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose inf
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-55035P4LOWCVSS 3.3≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55035 [LOW] CWE-125 CVE-2026-55035: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-45485P4LOWCVSS 3.3≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45485 [LOW] CWE-125 CVE-2026-45485: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-56193P4LOWCVSS 3.3≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-56193 [LOW] CWE-125 CVE-2026-56193: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-50665P4LOWCVSS 3.3≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-50665 [LOW] CWE-125 CVE-2026-50665: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-55139P4LOWCVSS 3.3≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14
CVE-2026-55139 [LOW] CWE-125 CVE-2026-55139: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information local
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
nvd
CVE-2022-35742HIGHCVSS 7.5≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-06-01
CVE-2022-35742 [HIGH] Microsoft Outlook Denial of Service Vulnerability
Microsoft Outlook Denial of Service Vulnerability
Microsoft Outlook Denial of Service Vulnerability
cvelistv5
CVE-2021-38650HIGHCVSS 7.6≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-09-15
CVE-2021-38650 [HIGH] Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
cvelistv5
CVE-2023-33151MEDIUMCVSS 6.5≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-07-11
CVE-2023-33151 [MEDIUM] Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability
cvelistv5
CVE-2021-28452HIGHCVSS 7.1≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2021-04-13
CVE-2021-28452 [HIGH] Microsoft Outlook Memory Corruption Vulnerability
Microsoft Outlook Memory Corruption Vulnerability
Microsoft Outlook Memory Corruption Vulnerability
cvelistv5
CVE-2020-17063MEDIUMCVSS 6.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2020-11-11
CVE-2020-17063 [MEDIUM] Microsoft Office Online Spoofing Vulnerability
Microsoft Office Online Spoofing Vulnerability
Microsoft Office Online Spoofing Vulnerability
cvelistv5
CVE-2023-23398HIGHCVSS 7.1≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-03-14
CVE-2023-23398 [HIGH] Microsoft Excel Spoofing Vulnerability
Microsoft Excel Spoofing Vulnerability
Microsoft Excel Spoofing Vulnerability
cvelistv5
CVE-2024-43609MEDIUMCVSS 6.5≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-10-08
CVE-2024-43609 [MEDIUM] CWE-200 Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
cvelistv5
CVE-2023-36893MEDIUMCVSS 6.5≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-08-08
CVE-2023-36893 [MEDIUM] CWE-20 Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability
cvelistv5
CVE-2024-38020MEDIUMCVSS 6.5≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-07-09
CVE-2024-38020 [MEDIUM] CWE-200 Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability
cvelistv5
CVE-2022-38001MEDIUMCVSS 6.5≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2022-10-11
CVE-2022-38001 [MEDIUM] Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
cvelistv5
CVE-2023-41764MEDIUMCVSS 5.5≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-09-12
CVE-2023-41764 [MEDIUM] CWE-347 Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
Microsoft Office Spoofing Vulnerability
cvelistv5
CVE-2022-24511MEDIUMCVSS 5.5≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2022-03-09
CVE-2022-24511 [MEDIUM] Microsoft Office Word Tampering Vulnerability
Microsoft Office Word Tampering Vulnerability
Microsoft Office Word Tampering Vulnerability
cvelistv5
CVE-2023-36769MEDIUMCVSS 4.6≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2023-11-06
CVE-2023-36769 [MEDIUM] Microsoft OneNote Spoofing Vulnerability
Microsoft OneNote Spoofing Vulnerability
Microsoft OneNote Spoofing Vulnerability
cvelistv5