Microsoft Office Ltsc 2021 vulnerabilities

781 known vulnerabilities affecting microsoft/microsoft_office_ltsc_2021.

Total CVEs

781

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL13HIGH581MEDIUM179LOW8

Vulnerabilities

SortPage 1 of 40

CVE-2023-23397P1CRITICALCVSS 9.8KEVPoCRansomware≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-03-14

CVE-2023-23397 [CRITICAL] CWE-20 CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability Microsoft Outlook Elevation of Privilege Vulnerability

nvd

CVE-2024-21413P1CRITICALCVSS 9.8KEVPoC≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2024-02-13

CVE-2024-21413 [CRITICAL] CWE-20 CVE-2024-21413: Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability

nvd

CVE-2026-21509P1HIGHCVSS 7.8KEVPoC≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-01-26

CVE-2026-21509 [HIGH] CWE-807 CVE-2026-21509: Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attac Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.

nvd

CVE-2021-42292P1HIGHCVSS 7.8KEV≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2021-11-10

CVE-2021-42292 [HIGH] CVE-2021-42292: Microsoft Excel Security Feature Bypass Vulnerability Microsoft Excel Security Feature Bypass Vulnerability

nvd

CVE-2024-38189P1HIGHCVSS 8.8KEV≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2024-08-13

CVE-2024-38189 [HIGH] CWE-20 CVE-2024-38189: Microsoft Project Remote Code Execution Vulnerability Microsoft Project Remote Code Execution Vulnerability

nvd

CVE-2023-35311P1HIGHCVSS 7.5KEV≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-07-11

CVE-2023-35311 [HIGH] CWE-367 CVE-2023-35311: Microsoft Outlook Security Feature Bypass Vulnerability Microsoft Outlook Security Feature Bypass Vulnerability

nvd

CVE-2026-21514P1HIGHCVSS 7.8KEV≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-02-10

CVE-2026-21514 [HIGH] CWE-807 CVE-2026-21514: Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

nvd

CVE-2024-38226P1HIGHCVSS 7.3KEV≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2024-09-10

CVE-2024-38226 [HIGH] CWE-693 CVE-2024-38226: Microsoft Publisher Security Feature Bypass Vulnerability Microsoft Publisher Security Feature Bypass Vulnerability

nvd

CVE-2023-36761P2MEDIUMCVSS 6.5KEV≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-09-12

CVE-2023-36761 [MEDIUM] CWE-20 CVE-2023-36761: Microsoft Word Information Disclosure Vulnerability Microsoft Word Information Disclosure Vulnerability

nvd

CVE-2023-21716P1CRITICALCVSS 9.8ExploitedPoC≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-02-14

CVE-2023-21716 [CRITICAL] CWE-190 CVE-2023-21716: Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability

nvd

CVE-2025-47165P1HIGHCVSS 7.8ExploitedPoC≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-06-10

CVE-2025-47165 [HIGH] CWE-416 CVE-2025-47165: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

nvd

CVE-2024-38021P1HIGHCVSS 8.8Exploited≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2024-07-09

CVE-2024-38021 [HIGH] CWE-20 CVE-2024-38021: Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability

nvd

CVE-2023-33131P2HIGHCVSS 8.8PoC≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-06-14

CVE-2023-33131 [HIGH] CWE-94 CVE-2023-33131: Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook Remote Code Execution Vulnerability

nvd

CVE-2025-47957P3HIGHCVSS 8.4PoC≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-06-10

CVE-2025-47957 [HIGH] CWE-416 CVE-2025-47957: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

nvd

CVE-2025-47175P3HIGHCVSS 7.8PoC≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-06-10

CVE-2025-47175 [HIGH] CWE-416 CVE-2025-47175: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locall Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

nvd

CVE-2025-27751P3HIGHCVSS 7.8PoC≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2025-04-08

CVE-2025-27751 [HIGH] CWE-416 CVE-2025-27751: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

nvd

CVE-2023-23399P3HIGHCVSS 7.8PoC≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-03-14

CVE-2023-23399 [HIGH] CWE-125 CVE-2023-23399: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

nvd

CVE-2023-33148P3HIGHCVSS 7.8PoC≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-07-11

CVE-2023-33148 [HIGH] CWE-59 CVE-2023-33148: Microsoft Office Elevation of Privilege Vulnerability Microsoft Office Elevation of Privilege Vulnerability

nvd

CVE-2026-88156P2CRITICALCVSS 9.8≥ 16.0.1, < 16.0.14334.209742026-10-13

CVE-2026-88156 [CRITICAL] CWE-121 CVE-2026-88156: Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute c Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

nvd

CVE-2023-36041P3HIGHCVSS 7.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2023-11-14

CVE-2023-36041 [HIGH] CWE-416 CVE-2023-36041: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

nvd

1 / 40Next →