Microsoft Office 2019 vulnerabilities

501 known vulnerabilities affecting microsoft/microsoft_office_2019.

Total CVEs

501

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL6HIGH408MEDIUM80LOW7

Vulnerabilities

SortPage 5 of 26

CVE-2025-62562P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-12-09

CVE-2025-62562 [HIGH] CWE-416 CVE-2025-62562: Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

nvd

CVE-2025-62563P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-12-09

CVE-2025-62563 [HIGH] CWE-416 CVE-2025-62563: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

nvd

CVE-2025-59234P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2025-10-14

CVE-2025-59234 [HIGH] CWE-416 CVE-2025-59234: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-21259P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-02-10

CVE-2026-21259 [HIGH] CWE-122 CVE-2026-21259: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate priv Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally.

nvd

CVE-2026-50314P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-50314 [HIGH] CWE-416 CVE-2026-50314: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-47290P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-47290 [HIGH] CWE-416 CVE-2026-47290: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-44819P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-06-09

CVE-2026-44819 [HIGH] CWE-122 CVE-2026-44819: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-45475P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-06-09

CVE-2026-45475 [HIGH] CWE-122 CVE-2026-45475: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-44824P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-06-09

CVE-2026-44824 [HIGH] CWE-122 CVE-2026-44824: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2024-43504P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2024-10-08

CVE-2024-43504 [HIGH] CWE-416 CVE-2024-43504: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

nvd

CVE-2026-55120P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-55120 [HIGH] CWE-122 CVE-2026-55120: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-55123P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-55123 [HIGH] CWE-122 CVE-2026-55123: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-55043P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-55043 [HIGH] CWE-122 CVE-2026-55043: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-55129P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-55129 [HIGH] CWE-122 CVE-2026-55129: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-55018P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-55018 [HIGH] CWE-416 CVE-2026-55018: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-50467P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-50467 [HIGH] CWE-416 CVE-2026-50467: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-55056P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-55056 [HIGH] CWE-122 CVE-2026-55056: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-55140P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-55140 [HIGH] CWE-122 CVE-2026-55140: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-55049P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-55049 [HIGH] CWE-122 CVE-2026-55049: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-50301P3HIGHCVSS 7.8≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases2026-07-14

CVE-2026-50301 [HIGH] CWE-122 CVE-2026-50301: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

nvd

← Previous5 / 26Next →