Microsoft Office Ltsc 2024 vulnerabilities
674 known vulnerabilities affecting microsoft/microsoft_office_ltsc_2024.
Total CVEs
674
CISA KEV
2
actively exploited
Public exploits
7
Exploited in wild
5
Severity breakdown
CRITICAL9HIGH508MEDIUM149LOW8
Vulnerabilities
Page 8 of 34
CVE-2026-108446P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-15
CVE-2026-108446 [HIGH] CWE-416 CVE-2026-108446: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108441P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-15
CVE-2026-108441 [HIGH] CWE-122 CVE-2026-108441: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108437P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-15
CVE-2026-108437 [HIGH] CWE-122 CVE-2026-108437: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108428P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-15
CVE-2026-108428 [HIGH] CWE-122 CVE-2026-108428: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108430P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-15
CVE-2026-108430 [HIGH] CWE-122 CVE-2026-108430: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108439P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-15
CVE-2026-108439 [HIGH] CWE-122 CVE-2026-108439: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108449P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-15
CVE-2026-108449 [HIGH] CWE-122 CVE-2026-108449: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108426P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-15
CVE-2026-108426 [HIGH] CWE-122 CVE-2026-108426: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97767P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-13
CVE-2026-97767 [HIGH] CWE-415 CVE-2026-97767: Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97778P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-13
CVE-2026-97778 [HIGH] CWE-190 CVE-2026-97778: Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70269P3HIGHCVSS 8.1≥ 16.0.0, < 16.0.17932.210562026-10-13
CVE-2026-70269 [HIGH] CWE-122 CVE-2026-70269: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88185P3HIGHCVSS 8.1≥ 16.0.0, < 16.0.17932.210562026-10-13
CVE-2026-88185 [HIGH] CWE-122 CVE-2026-88185: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70254P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-13
CVE-2026-70254 [HIGH] CWE-125 CVE-2026-70254: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70125P3HIGHCVSS 8.8≥ 16.0.0, < https://aka.ms/OfficeSecurityReleases2026-09-23
CVE-2026-70125 [HIGH] CWE-122 CVE-2026-70125: Microsoft Office Outlook Remote Code Execution Vulnerability
Microsoft Office Outlook Remote Code Execution Vulnerability
nvd
CVE-2026-105718P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-13
CVE-2026-105718 [HIGH] CWE-20 CVE-2026-105718: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78518P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.209762026-09-08
CVE-2026-78518 [HIGH] CWE-20 CVE-2026-78518: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78512P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.209762026-09-08
CVE-2026-78512 [HIGH] CWE-122 CVE-2026-78512: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code ov
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-97755P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-13
CVE-2026-97755 [HIGH] CWE-125 CVE-2026-97755: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108443P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-15
CVE-2026-108443 [HIGH] CWE-193 CVE-2026-108443: Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a net
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108451P3HIGHCVSS 8.8≥ 16.0.0, < 16.0.17932.210562026-10-15
CVE-2026-108451 [HIGH] CWE-122 CVE-2026-108451: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code ov
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd