Microsoft Office vulnerabilities
1,005 known vulnerabilities affecting microsoft/office.
Total CVEs
1,005
CISA KEV
35
actively exploited
Public exploits
103
Exploited in wild
68
Severity breakdown
CRITICAL277HIGH567MEDIUM155LOW6
Vulnerabilities
Page 35 of 51
CVE-2024-21379P3HIGHCVSS 7.8v20192024-02-13
CVE-2024-21379 [HIGH] CWE-190 CVE-2024-21379: Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
nvd
CVE-2025-24075P3HIGHCVSS 7.8v20192025-03-11
CVE-2025-24075 [HIGH] CWE-121 CVE-2025-24075: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-47173P3HIGHCVSS 7.8v2016v20192025-06-10
CVE-2025-47173 [HIGH] CWE-641 CVE-2025-47173: Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locall
Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62556P3HIGHCVSS 7.8v20192025-12-09
CVE-2025-62556 [HIGH] CWE-822 CVE-2025-62556: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62564P3HIGHCVSS 7.8v20192025-12-09
CVE-2025-62564 [HIGH] CWE-125 CVE-2025-62564: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62560P3HIGHCVSS 7.8v20192025-12-09
CVE-2025-62560 [HIGH] CWE-126 CVE-2025-62560: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-62561P3HIGHCVSS 7.8v20192025-12-09
CVE-2025-62561 [HIGH] CWE-822 CVE-2025-62561: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-26112P3HIGHCVSS 7.8v20192026-03-10
CVE-2026-26112 [HIGH] CWE-822 CVE-2026-26112: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-32704P3HIGHCVSS 7.8v20192025-05-13
CVE-2025-32704 [HIGH] CWE-126 CVE-2025-32704: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2019-1034P3HIGHCVSS 7.8v2010v2016+1 more2019-06-12
CVE-2019-1034 [HIGH] CVE-2019-1034: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly ha
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with
nvd
CVE-2019-1201P3HIGHCVSS 7.8v2010v2016+1 more2019-08-14
CVE-2019-1201 [HIGH] CVE-2019-1201: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly ha
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then take actions on behalf of the logged-on user with the same perm
nvd
CVE-2020-17062P3HIGHCVSS 7.8v2010v2013+2 more2020-11-11
CVE-2020-17062 [HIGH] CVE-2020-17062: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
nvd
CVE-2020-17065P3HIGHCVSS 7.8v20192020-11-11
CVE-2020-17065 [HIGH] CVE-2020-17065: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2021-1716P3HIGHCVSS 7.8v2010v20192021-01-12
CVE-2021-1716 [HIGH] CVE-2021-1716: Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
nvd
CVE-2021-1715P3HIGHCVSS 7.8v2010v20192021-01-12
CVE-2021-1715 [HIGH] CWE-787 CVE-2021-1715: Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
nvd
CVE-2020-17122P3HIGHCVSS 7.8v20102020-12-10
CVE-2020-17122 [HIGH] CVE-2020-17122: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2020-17129P3HIGHCVSS 7.8v20192020-12-10
CVE-2020-17129 [HIGH] CVE-2020-17129: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2020-17125P3HIGHCVSS 7.8v20192020-12-10
CVE-2020-17125 [HIGH] CVE-2020-17125: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2020-17019P3HIGHCVSS 7.8v20102020-11-11
CVE-2020-17019 [HIGH] CWE-415 CVE-2020-17019: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2020-17064P3HIGHCVSS 7.8v2010v2013+2 more2020-11-11
CVE-2020-17064 [HIGH] CVE-2020-17064: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd