Microsoft Office Long Term Servicing Channel vulnerabilities

CVE-2026-20955 [HIGH] CWE-822 CVE-2026-20955: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-20948 [HIGH] CWE-822 CVE-2026-20948: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute co Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-24077 [HIGH] CWE-416 CVE-2025-24077: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-47173 [HIGH] CWE-641 CVE-2025-47173: Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locall Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2025-54899 [HIGH] CWE-590 CVE-2025-54899: Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2024-43576 [HIGH] CWE-426 CVE-2024-43576: Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability

CVE-2026-26112 [HIGH] CWE-822 CVE-2026-26112: Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-30393 [HIGH] CWE-416 CVE-2025-30393: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-32704 [HIGH] CWE-126 CVE-2025-32704: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59225 [HIGH] CWE-416 CVE-2025-59225: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59224 [HIGH] CWE-416 CVE-2025-59224: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59223 [HIGH] CWE-416 CVE-2025-59223: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2022-30174 [HIGH] CVE-2022-30174: Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability

CVE-2022-29109 [HIGH] CVE-2022-29109: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

CVE-2021-40485 [HIGH] CWE-94 CVE-2021-40485: Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel Remote Code Execution Vulnerability

CVE-2023-35636 [MEDIUM] CWE-200 CVE-2023-35636: Microsoft Outlook Information Disclosure Vulnerability Microsoft Outlook Information Disclosure Vulnerability

CVE-2024-21379 [HIGH] CWE-190 CVE-2024-21379: Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability

CVE-2025-21364 [HIGH] CWE-502 CVE-2025-21364: Microsoft Excel Security Feature Bypass Vulnerability Microsoft Excel Security Feature Bypass Vulnerability

CVE-2024-30104 [HIGH] CWE-59 CVE-2024-30104: Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability

CVE-2025-21186 [HIGH] CWE-122 CVE-2025-21186: Microsoft Access Remote Code Execution Vulnerability Microsoft Access Remote Code Execution Vulnerability