Microsoft Office Ltsc 2021 vulnerabilities

CVE-2025-53730 [HIGH] CWE-416 CVE-2025-53730: Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

CVE-2025-59238 [HIGH] CWE-416 CVE-2025-59238: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locall Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

CVE-2025-59226 [HIGH] CWE-416 CVE-2025-59226: Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally.

CVE-2026-44817 [HIGH] CWE-843 CVE-2026-44817: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-45469 [HIGH] CWE-122 CVE-2026-45469: Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2021-40481 [HIGH] CVE-2021-40481: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability

CVE-2025-29816 [HIGH] CWE-349 CVE-2025-29816: Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a secur Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.

CVE-2021-40480 [HIGH] CVE-2021-40480: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability

CVE-2021-43875 [HIGH] CVE-2021-43875: Microsoft Office Graphics Remote Code Execution Vulnerability Microsoft Office Graphics Remote Code Execution Vulnerability

CVE-2026-69477 [HIGH] CWE-122 CVE-2026-69477: Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.

CVE-2024-20677 [HIGH] CWE-122 CVE-2024-20677: A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vu A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint and Outlook for Windows and Mac. Versions of Office that had this feature enabled will no longer have access to it. This includes Office 2019, Office 2021, Office

CVE-2023-35636 [MEDIUM] CWE-200 CVE-2023-35636: Microsoft Outlook Information Disclosure Vulnerability Microsoft Outlook Information Disclosure Vulnerability

CVE-2024-30042 [HIGH] CWE-502 CVE-2024-30042: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

CVE-2025-24075 [HIGH] CWE-121 CVE-2025-24075: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-20955 [HIGH] CWE-822 CVE-2026-20955: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-20948 [HIGH] CWE-822 CVE-2026-20948: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute co Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-47173 [HIGH] CWE-641 CVE-2025-47173: Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locall Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-54899 [HIGH] CWE-590 CVE-2025-54899: Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-26112 [HIGH] CWE-822 CVE-2026-26112: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-81957 [HIGH] CWE-125 CVE-2026-81957: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.