Microsoft Office Word vulnerabilities

98 known CVE vulnerabilities in Microsoft Office Word, translated and rated.

CVE-2026-97001High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-96996High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-96995High
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
CVE-2026-88210High
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-88202High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The issue stems from improper memory handling during document processing.
CVE-2026-88186High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88185High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88150High
A use of uninitialized resource vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-83891High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70302High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70301High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70287High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70269High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70268High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70220High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-105715High
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-41101High
Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.
CVE-2026-40364High
In Microsoft Office Word, a vulnerability related to access of resource using incompatible type ('type confusion') allows an unauthorized attacker to execute code locally.
CVE-2026-20948High
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-20944High
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-70300Critical
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-83951Medium
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-83949Medium
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-81952High
Heap-based buffer overflow in Microsoft Office Word. Allows an unauthorized attacker to execute code over a network.
CVE-2026-80090Medium
Out-of-bounds read in Microsoft Office Word. An unauthorized attacker can disclose information over a network.
CVE-2026-80088Medium
Out-of-bounds read in Microsoft Office Word. An unauthorized attacker can disclose information over a network.
CVE-2026-80085High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80080High
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80079Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78526High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78522Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78521High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78517High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78514High
Use-after-free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78512High
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78511High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78507High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78506Medium
An improper null termination vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-78504High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78503Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78502Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-77911Medium
Out-of-bounds read in Microsoft Office Word allows an unauthenticated attacker to disclose information over a network.
CVE-2026-77901High
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-77504High
A double free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code remotely over the network.
CVE-2026-72976Medium
An out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-72973High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-72972High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69764High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69759High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69734Medium
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS