Microsoft Office Word vulnerabilities

43 known CVE vulnerabilities in Microsoft Office Word, translated and rated.

CVE-2026-41101High
Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.
CVE-2026-40364High
In Microsoft Office Word, a vulnerability related to access of resource using incompatible type ('type confusion') allows an unauthorized attacker to execute code locally.
CVE-2026-20948High
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-20944High
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-70105Medium
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70319Medium
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70311High
A use-after-free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-70310Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-66810Medium
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-66806Medium
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64917Medium
An out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64915High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64907High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64905High
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63531Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63530Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63528Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63527High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63525High
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63521Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63518High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-58651High
A vulnerability in Microsoft Office Word involves a heap-based buffer overflow, allowing an unauthorized attacker to execute code locally.
CVE-2026-55142Medium
A numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55134High
A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55132High
A double free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55130High
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55128High
A Use-After-Free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted documents.
CVE-2026-55127High
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55124Medium
The vulnerability in Microsoft Office Word is caused by improper validation of a specified type of input. It allows an unauthorized attacker to disclose information locally.
CVE-2026-55055High
A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55050Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55038High
A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55033High
An integer overflow or wraparound vulnerability has been discovered in Microsoft Office Word. This flaw allows an unauthorized attacker to execute code locally.
CVE-2026-55032High
A Use-After-Free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted documents.
CVE-2026-45643High
Untrusted pointer dereference vulnerability in Microsoft Office Word. An unauthorized attacker can exploit this flaw to execute code locally.
CVE-2026-45486High
Use-after-free vulnerability in Microsoft Office Word. An unauthorized attacker can exploit this flaw to execute code locally.
CVE-2026-45471High
An untrusted pointer dereference vulnerability has been found in Microsoft Office Word. An unauthorized attacker can exploit this vulnerability to execute code locally.
CVE-2026-45466Low
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-45457High
Out-of-bounds read vulnerability in Microsoft Office Word. An unauthorized attacker can exploit this flaw to execute code locally.
CVE-2026-33822Medium
Microsoft Office Word has an out-of-bounds read vulnerability that allows an unauthorized attacker to disclose information locally.
CVE-2026-33115High
A use-after-free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-33114High
An untrusted pointer dereference vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-33095High
Use-After-Free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.