cbcvebase.

Microsoft Office vulnerabilities

1,005 known vulnerabilities affecting microsoft/office.

Total CVEs
1,005
CISA KEV
34
actively exploited
Public exploits
103
Exploited in wild
67
Severity breakdown
CRITICAL277HIGH567MEDIUM155LOW6

Vulnerabilities

Page 32 of 51
CVE-2025-27752P3HIGHCVSS 7.8v2016v20192025-04-08
CVE-2025-27752 [HIGH] CWE-122 CVE-2025-27752: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-26630P3HIGHCVSS 7.8v20192025-03-11
CVE-2025-26630 [HIGH] CWE-416 CVE-2025-26630: Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-27746P3HIGHCVSS 7.8v2016v20192025-04-08
CVE-2025-27746 [HIGH] CWE-416 CVE-2025-27746: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-27750P3HIGHCVSS 7.8v20192025-04-08
CVE-2025-27750 [HIGH] CWE-416 CVE-2025-27750: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-27747P3HIGHCVSS 7.8v20192025-04-08
CVE-2025-27747 [HIGH] CWE-822 CVE-2025-27747: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-54906P3HIGHCVSS 7.8v2016v20192025-09-09
CVE-2025-54906 [HIGH] CWE-416 CVE-2025-54906: Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code l Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-29820P3HIGHCVSS 7.8v2016v20192025-04-08
CVE-2025-29820 [HIGH] CWE-416 CVE-2025-29820: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-24082P3HIGHCVSS 7.8v20192025-03-11
CVE-2025-24082 [HIGH] CWE-416 CVE-2025-24082: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-24080P3HIGHCVSS 7.8v2016v20192025-03-11
CVE-2025-24080 [HIGH] CWE-416 CVE-2025-24080: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-24081P3HIGHCVSS 7.8v20192025-03-11
CVE-2025-24081 [HIGH] CWE-416 CVE-2025-24081: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-24079P3HIGHCVSS 7.8v20192025-03-11
CVE-2025-24079 [HIGH] CWE-416 CVE-2025-24079: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-30386P3HIGHCVSS 7.8v2016v20192025-05-13
CVE-2025-30386 [HIGH] CWE-416 CVE-2025-30386: Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-29979P3HIGHCVSS 7.8v20192025-05-13
CVE-2025-29979 [HIGH] CWE-122 CVE-2025-29979: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-20946P3HIGHCVSS 7.8v20192026-01-13
CVE-2026-20946 [HIGH] CWE-125 CVE-2026-20946: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-47169P3HIGHCVSS 7.8v20192025-06-10
CVE-2025-47169 [HIGH] CWE-122 CVE-2025-47169: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-49698P3HIGHCVSS 7.8v20192025-07-08
CVE-2025-49698 [HIGH] CWE-416 CVE-2025-49698: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-29977P3HIGHCVSS 7.8v20192025-05-13
CVE-2025-29977 [HIGH] CWE-416 CVE-2025-29977: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-47168P3HIGHCVSS 7.8v20192025-06-10
CVE-2025-47168 [HIGH] CWE-416 CVE-2025-47168: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-30376P3HIGHCVSS 7.8v20192025-05-13
CVE-2025-30376 [HIGH] CWE-122 CVE-2025-30376: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62552P3HIGHCVSS 7.8v20192025-12-09
CVE-2025-62552 [HIGH] CWE-23 CVE-2025-62552: Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code l Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.
nvd
Microsoft Office vulnerabilities | cvebase