Microsoft Office vulnerabilities
1,005 known vulnerabilities affecting microsoft/office.
Total CVEs
1,005
CISA KEV
34
actively exploited
Public exploits
103
Exploited in wild
67
Severity breakdown
CRITICAL277HIGH567MEDIUM155LOW6
Vulnerabilities
Page 39 of 51
CVE-2025-29791P3HIGHCVSS 7.8v2016v20192025-04-08
CVE-2025-29791 [HIGH] CWE-843 CVE-2025-29791: Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
nvd
CVE-2024-49026P3HIGHCVSS 7.8v20192024-11-12
CVE-2024-49026 [HIGH] CWE-77 CVE-2024-49026: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2025-21354P3HIGHCVSS 7.8v20192025-01-14
CVE-2025-21354 [HIGH] CWE-822 CVE-2025-21354: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2024-43463P3HIGHCVSS 7.8v20192024-09-10
CVE-2024-43463 [HIGH] CWE-416 CVE-2024-43463: Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2025-21387P3HIGHCVSS 7.8v20192025-02-11
CVE-2025-21387 [HIGH] CWE-416 CVE-2025-21387: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2025-21390P3HIGHCVSS 7.8v20192025-02-11
CVE-2025-21390 [HIGH] CWE-122 CVE-2025-21390: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2025-21386P3HIGHCVSS 7.8v20192025-02-11
CVE-2025-21386 [HIGH] CWE-416 CVE-2025-21386: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2025-21392P3HIGHCVSS 7.8v2016v20192025-02-11
CVE-2025-21392 [HIGH] CWE-416 CVE-2025-21392: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2025-21394P3HIGHCVSS 7.8v20192025-02-11
CVE-2025-21394 [HIGH] CWE-416 CVE-2025-21394: Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
nvd
CVE-2024-38169P3HIGHCVSS 7.8v20192024-08-13
CVE-2024-38169 [HIGH] CWE-122 CVE-2024-38169: Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2024-43616P3HIGHCVSS 7.8v20192024-10-08
CVE-2024-43616 [HIGH] CWE-426 CVE-2024-43616: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2025-21356P3HIGHCVSS 7.8v20192025-01-14
CVE-2025-21356 [HIGH] CWE-122 CVE-2025-21356: Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2024-43505P3HIGHCVSS 7.8v20192024-10-08
CVE-2024-43505 [HIGH] CWE-357 CVE-2024-43505: Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2025-21402P3HIGHCVSS 7.8v20242025-01-14
CVE-2025-21402 [HIGH] CWE-641 CVE-2025-21402: Microsoft Office OneNote Remote Code Execution Vulnerability
Microsoft Office OneNote Remote Code Execution Vulnerability
nvd
CVE-2017-0105P3MEDIUMCVSS 5.5v20102017-03-17
CVE-2017-0105 [MEDIUM] CWE-200 CVE-2017-0105: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pac
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from out-of-bound memory via a crafted Office document, aka "Microsoft Office Information Disclosure Vulne
nvd
CVE-2025-30375P3HIGHCVSS 7.8v20192025-05-13
CVE-2025-30375 [HIGH] CWE-843 CVE-2025-30375: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-30383P3HIGHCVSS 7.8v20192025-05-13
CVE-2025-30383 [HIGH] CWE-843 CVE-2025-30383: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-53739P3HIGHCVSS 7.8v20192025-08-12
CVE-2025-53739 [HIGH] CWE-843 CVE-2025-53739: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-59231P3HIGHCVSS 7.8v20192025-10-14
CVE-2025-59231 [HIGH] CWE-843 CVE-2025-59231: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-59233P3HIGHCVSS 7.8v20192025-10-14
CVE-2025-59233 [HIGH] CWE-843 CVE-2025-59233: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an un
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
nvd