Microsoft Office vulnerabilities
149 known CVE vulnerabilities in Microsoft Office, translated and rated.
- CVE-2026-55057Medium
An integer overflow or wraparound vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-55056High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.
- CVE-2026-55049High
A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-55047Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-55045High
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-55042Medium
The vulnerability in Microsoft Office involves the use of an uninitialized resource, allowing an unauthorized attacker to disclose information locally.
- CVE-2026-55035Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-55028Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-55027Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-55026Medium
An integer overflow or wraparound vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-55023Medium
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-55022High
A type confusion vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The flaw arises from accessing a resource using an incompatible type.
- CVE-2026-55018High
A Use-After-Free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.
- CVE-2026-55017High
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted data.
- CVE-2026-50665High
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-50467High
A Use-After-Free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.
- CVE-2026-50314High
A use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-50301High
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted data.
- CVE-2026-47290High
A Use-After-Free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally. The issue stems from improper memory management when processing specially crafted files.
- CVE-2026-56193High
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-47635High
Microsoft Office contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.
- CVE-2026-47293High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- CVE-2026-45645High
Untrusted pointer dereference vulnerability in Microsoft Office. An unauthorized attacker can exploit this flaw to execute code locally.
- CVE-2026-45485Low
An out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-45475High
A heap-based buffer overflow vulnerability has been found in Microsoft Office. An unauthorized attacker can exploit this vulnerability to execute code locally.
- CVE-2026-45474High
Use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-45472High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-45463High
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-45461High
Use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-45460Medium
Buffer over-read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-45458High
A use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-45456High
A type confusion vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-44824High
A heap-based buffer overflow vulnerability has been found in Microsoft Office. An unauthorized attacker can exploit this vulnerability to execute code locally.
- CVE-2026-44821Medium
Microsoft Office has an out-of-bounds read vulnerability that allows an unauthorized attacker to disclose information locally.
- CVE-2026-44819High
A heap-based buffer overflow vulnerability has been found in Microsoft Office. An unauthorized attacker can exploit this vulnerability to execute code locally.
- CVE-2025-62554High
A vulnerability in Microsoft Office related to access of resource using incompatible type ('type confusion') allows an unauthorized attacker to execute code locally.
- CVE-2024-30104High
This vulnerability allows remote code execution in Microsoft Office. An attacker can exploit a specially crafted file to take control of the victim's system.
- CVE-2024-30101High
A remote code execution vulnerability in Microsoft Office allows an attacker to execute arbitrary code in the context of the logged-on user. Exploitation requires the victim to open a specially crafted file.
- CVE-2024-20673High
A vulnerability in Microsoft Office allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious documents or files that the user opens.
- CVE-2023-35371High
A vulnerability in Microsoft Office allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious documents or links.
- CVE-2023-33149High
A vulnerability in Microsoft Office allows for remote code execution through the processing of malicious graphics. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2023-33148High
A vulnerability in Microsoft Office allows for elevation of privilege, potentially leading to unauthorized access to the system.
- CVE-2023-33146High
A vulnerability in Microsoft Office allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious documents or links.
- CVE-2023-21714Medium
Information disclosure vulnerability in Microsoft Office. An attacker could exploit this flaw to gain access to sensitive data.
- CVE-2022-41107High
A vulnerability in Microsoft Office allows remote code execution through the processing of specially crafted graphics. An attacker can exploit this flaw to gain full control over the victim's system.
- CVE-2021-38650High
Spoofing vulnerability in Microsoft Office. Could allow an attacker to impersonate trusted sources.
- CVE-2021-34469High
Security feature bypass vulnerability in Microsoft Office. An attacker could bypass protection mechanisms.
- CVE-2021-27057High
Remote code execution vulnerability in Microsoft Office. An attacker could exploit it to run malicious code on the victim's machine.
- CVE-2021-24108High
Remote code execution vulnerability in Microsoft Office. An attacker could exploit it to run arbitrary code on the affected system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

