cbcvebase.

Microsoft Office Ltsc 2021 vulnerabilities

781 known vulnerabilities affecting microsoft/microsoft_office_ltsc_2021.

Total CVEs
781
CISA KEV
9
actively exploited
Public exploits
13
Exploited in wild
12
Severity breakdown
CRITICAL13HIGH581MEDIUM179LOW8

Vulnerabilities

Page 7 of 40
CVE-2026-88202P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-88202 [HIGH] CWE-122 CVE-2026-88202: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97747P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-97747 [HIGH] CWE-416 CVE-2026-97747: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97752P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-97752 [HIGH] CWE-416 CVE-2026-97752: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97771P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-97771 [HIGH] CWE-416 CVE-2026-97771: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108427P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-15
CVE-2026-108427 [HIGH] CWE-20 CVE-2026-108427: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108444P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-15
CVE-2026-108444 [HIGH] CWE-122 CVE-2026-108444: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97758P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-97758 [HIGH] CWE-122 CVE-2026-97758: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97751P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-97751 [HIGH] CWE-122 CVE-2026-97751: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88197P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-88197 [HIGH] CWE-122 CVE-2026-88197: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-81385P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209062026-09-08
CVE-2026-81385 [HIGH] CWE-502 CVE-2026-81385: Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to e Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88144P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-88144 [HIGH] CWE-416 CVE-2026-88144: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70215P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-70215 [HIGH] CWE-416 CVE-2026-70215: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97008P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-97008 [HIGH] CWE-124 CVE-2026-97008: Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97011P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-97011 [HIGH] CWE-763 CVE-2026-97011: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute c Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-105595P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-105595 [HIGH] CWE-125 CVE-2026-105595: Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78525P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209062026-09-08
CVE-2026-78525 [HIGH] CWE-416 CVE-2026-78525: Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a ne Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78519P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209062026-09-08
CVE-2026-78519 [HIGH] CWE-908 CVE-2026-78519: Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69767P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209062026-09-08
CVE-2026-69767 [HIGH] CWE-416 CVE-2026-69767: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69797P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209062026-09-08
CVE-2026-69797 [HIGH] CWE-416 CVE-2026-69797: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69678P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209062026-09-08
CVE-2026-69678 [HIGH] CWE-416 CVE-2026-69678: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
nvd
Microsoft Office Ltsc 2021 vulnerabilities | cvebase