Microsoft Office Ltsc 2021 vulnerabilities
781 known vulnerabilities affecting microsoft/microsoft_office_ltsc_2021.
Total CVEs
781
CISA KEV
9
actively exploited
Public exploits
13
Exploited in wild
12
Severity breakdown
CRITICAL13HIGH581MEDIUM179LOW8
Vulnerabilities
Page 9 of 40
CVE-2026-97778P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-97778 [HIGH] CWE-190 CVE-2026-97778: Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70269P3HIGHCVSS 8.1≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-70269 [HIGH] CWE-122 CVE-2026-70269: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88185P3HIGHCVSS 8.1≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-88185 [HIGH] CWE-122 CVE-2026-88185: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70254P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-70254 [HIGH] CWE-125 CVE-2026-70254: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70125P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-09-23
CVE-2026-70125 [HIGH] CWE-122 CVE-2026-70125: Microsoft Office Outlook Remote Code Execution Vulnerability
Microsoft Office Outlook Remote Code Execution Vulnerability
nvd
CVE-2026-105718P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-105718 [HIGH] CWE-20 CVE-2026-105718: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78518P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209062026-09-08
CVE-2026-78518 [HIGH] CWE-20 CVE-2026-78518: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78512P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209062026-09-08
CVE-2026-78512 [HIGH] CWE-122 CVE-2026-78512: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code ov
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97755P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-13
CVE-2026-97755 [HIGH] CWE-125 CVE-2026-97755: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108443P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-15
CVE-2026-108443 [HIGH] CWE-193 CVE-2026-108443: Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a net
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108451P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209742026-10-15
CVE-2026-108451 [HIGH] CWE-122 CVE-2026-108451: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code ov
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-40361P3HIGHCVSS 8.4≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-05-12
CVE-2026-40361 [HIGH] CWE-416 CVE-2026-40361: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-20953P3HIGHCVSS 8.4≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-01-13
CVE-2026-20953 [HIGH] CWE-416 CVE-2026-20953: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-20952P3HIGHCVSS 8.4≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-01-13
CVE-2026-20952 [HIGH] CWE-416 CVE-2026-20952: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-40363P3HIGHCVSS 8.4≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-05-12
CVE-2026-40363 [HIGH] CWE-122 CVE-2026-40363: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-78510P3HIGHCVSS 8.4≥ 16.0.1, < 16.0.14334.209062026-09-08
CVE-2026-78510 [HIGH] CWE-122 CVE-2026-78510: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-40358P3HIGHCVSS 8.4≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-05-12
CVE-2026-40358 [HIGH] CWE-416 CVE-2026-40358: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code local
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2022-21840P3HIGHCVSS 8.8≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2022-01-11
CVE-2022-21840 [HIGH] CVE-2022-21840: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2026-77901P3HIGHCVSS 8.8≥ 16.0.1, < 16.0.14334.209062026-09-08
CVE-2026-77901 [HIGH] CWE-476 CVE-2026-77901: Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code ov
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-45458P3HIGHCVSS 8.4≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases2026-06-09
CVE-2026-45458 [HIGH] CWE-416 CVE-2026-45458: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd