Microsoft Office vulnerabilities
129 known CVE vulnerabilities in Microsoft Office, translated and rated.
- CVE-2026-42832High
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
- CVE-2026-42831High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-40419High
A use after free vulnerability in Microsoft Office allows an authorized attacker to locally elevate privileges.
- CVE-2026-40363High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-26134High
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.
- CVE-2026-26110High
Microsoft Office has a vulnerability related to resource access using an incompatible type ('type confusion'), allowing an unauthorized attacker to execute code locally.
- CVE-2026-20953High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-20952High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-20943High
An untrusted search path vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-62557High
A use after free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-62554High
A vulnerability in Microsoft Office related to access of resource using incompatible type ('type confusion') allows an unauthorized attacker to execute code locally.
- CVE-2025-62199High
A use after free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-59234High
A use after free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-59227High
A use after free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-53732High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-49702High
A vulnerability in Microsoft Office related to access of resource using incompatible type ('type confusion') allows an unauthorized attacker to execute code locally.
- CVE-2025-49697High
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-49696High
An out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-49695High
A use after free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-47953High
A use after free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-47167High
A vulnerability in Microsoft Office related to access of resource using incompatible type ('type confusion') allows an unauthorized attacker to execute code locally.
- CVE-2025-47164High
A use after free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-47162High
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2025-30386High
A use after free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2023-36565High
A vulnerability in Microsoft Office allows for privilege escalation through graphic manipulation. An attacker can exploit this flaw to gain elevated privileges on the system.
- CVE-2022-21840High
A vulnerability in Microsoft Office allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious documents that the user opens.
- CVE-2021-43875High
A vulnerability in Microsoft Office allows for remote code execution through the processing of malicious graphics. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2017-8630High
Microsoft Office 2016 contains a remote code execution vulnerability due to improper handling of objects in memory, known as 'Microsoft Office Memory Corruption Vulnerability'.
- CVE-2017-8502High
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka 'Microsoft Office Memory Corruption Vulnerability'.
- CVE-2017-8501High
Microsoft Office has a remote code execution vulnerability due to improper handling of objects in memory, known as 'Microsoft Office Memory Corruption Vulnerability'.
- CVE-2017-0243High
Microsoft Office allows a remote code execution vulnerability due to the way it handles objects in memory, known as 'Microsoft Office Remote Code Execution Vulnerability'.
- CVE-2017-8512High
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
- CVE-2017-8511High
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
- CVE-2017-8510High
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
- CVE-2017-8509High
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
- CVE-2017-8507High
A remote code execution vulnerability exists in Microsoft Office due to improper parsing of specially crafted email messages.
- CVE-2017-8506High
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
- CVE-2017-0260High
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, known as 'Office Remote Code Execution Vulnerability'.
- CVE-2016-3318High
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 contain a vulnerability that allows remote attackers to execute arbitrary code via a crafted file, known as 'Graphics Component Memory Corruption Vulnerability.'
- CVE-2026-21509HighActively exploited
Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.
- CVE-2023-33150Critical
A vulnerability in Microsoft Office allows for a security feature bypass, potentially leading to unauthorized access to user data.
- CVE-2021-38658High
Remote code execution vulnerability in Microsoft Office Graphics. An attacker could exploit it to run arbitrary code in the context of the logged-in user.
- CVE-2021-34478High
Microsoft Office Remote Code Execution Vulnerability. Details not available in the description.
- CVE-2021-27059HighActively exploited
Microsoft Office Remote Code Execution Vulnerability. Details are not provided in the description, but it allows remote code execution.
- CVE-2016-7277Critical
Microsoft Office 2016 contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document.
- CVE-2026-70323Medium
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-70317Medium
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-70315Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-70314Medium
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-70130High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.