Microsoft Office Word vulnerabilities

80 known CVE vulnerabilities in Microsoft Office Word, translated and rated.

CVE-2026-64905High
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63531Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63530Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63528Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63527High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63525High
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63521Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63518High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-58651High
A vulnerability in Microsoft Office Word involves a heap-based buffer overflow, allowing an unauthorized attacker to execute code locally.
CVE-2026-55142Medium
A numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55134High
A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55132High
A double free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55130High
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55128High
A Use-After-Free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted documents.
CVE-2026-55127High
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55124Medium
The vulnerability in Microsoft Office Word is caused by improper validation of a specified type of input. It allows an unauthorized attacker to disclose information locally.
CVE-2026-55055High
A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55050Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55038High
A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55033High
An integer overflow or wraparound vulnerability has been discovered in Microsoft Office Word. This flaw allows an unauthorized attacker to execute code locally.
CVE-2026-55032High
A Use-After-Free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted documents.
CVE-2026-45643High
Untrusted pointer dereference vulnerability in Microsoft Office Word. An unauthorized attacker can exploit this flaw to execute code locally.
CVE-2026-45486High
Use-after-free vulnerability in Microsoft Office Word. An unauthorized attacker can exploit this flaw to execute code locally.
CVE-2026-45471High
An untrusted pointer dereference vulnerability has been found in Microsoft Office Word. An unauthorized attacker can exploit this vulnerability to execute code locally.
CVE-2026-45466Low
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-45457High
Out-of-bounds read vulnerability in Microsoft Office Word. An unauthorized attacker can exploit this flaw to execute code locally.
CVE-2026-33822Medium
Microsoft Office Word has an out-of-bounds read vulnerability that allows an unauthorized attacker to disclose information locally.
CVE-2026-33115High
A use-after-free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-33114High
An untrusted pointer dereference vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-33095High
Use-After-Free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS