Microsoft Office vulnerabilities
129 known CVE vulnerabilities in Microsoft Office, translated and rated.
- CVE-2026-56193High
An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-47635High
Microsoft Office contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.
- CVE-2026-47293High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
- CVE-2026-45645High
Untrusted pointer dereference vulnerability in Microsoft Office. An unauthorized attacker can exploit this flaw to execute code locally.
- CVE-2026-45485Low
An out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-45475High
A heap-based buffer overflow vulnerability has been found in Microsoft Office. An unauthorized attacker can exploit this vulnerability to execute code locally.
- CVE-2026-45474High
Use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-45472High
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-45463High
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-45461High
Use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-45460Medium
Buffer over-read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.
- CVE-2026-45458High
A use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-45456High
A type confusion vulnerability in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-44824High
A heap-based buffer overflow vulnerability has been found in Microsoft Office. An unauthorized attacker can exploit this vulnerability to execute code locally.
- CVE-2026-44821Medium
Microsoft Office has an out-of-bounds read vulnerability that allows an unauthorized attacker to disclose information locally.
- CVE-2026-44819High
A heap-based buffer overflow vulnerability has been found in Microsoft Office. An unauthorized attacker can exploit this vulnerability to execute code locally.
- CVE-2024-30104High
This vulnerability allows remote code execution in Microsoft Office. An attacker can exploit a specially crafted file to take control of the victim's system.
- CVE-2024-30101High
A remote code execution vulnerability in Microsoft Office allows an attacker to execute arbitrary code in the context of the logged-on user. Exploitation requires the victim to open a specially crafted file.
- CVE-2024-20673High
A vulnerability in Microsoft Office allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious documents or files that the user opens.
- CVE-2023-35371High
A vulnerability in Microsoft Office allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious documents or links.
- CVE-2023-33149High
A vulnerability in Microsoft Office allows for remote code execution through the processing of malicious graphics. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2023-33148High
A vulnerability in Microsoft Office allows for elevation of privilege, potentially leading to unauthorized access to the system.
- CVE-2023-33146High
A vulnerability in Microsoft Office allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious documents or links.
- CVE-2023-21714Medium
Information disclosure vulnerability in Microsoft Office. An attacker could exploit this flaw to gain access to sensitive data.
- CVE-2022-41107High
A vulnerability in Microsoft Office allows remote code execution through the processing of specially crafted graphics. An attacker can exploit this flaw to gain full control over the victim's system.
- CVE-2021-38650High
Spoofing vulnerability in Microsoft Office. Could allow an attacker to impersonate trusted sources.
- CVE-2021-34469High
Security feature bypass vulnerability in Microsoft Office. An attacker could bypass protection mechanisms.
- CVE-2021-27057High
Remote code execution vulnerability in Microsoft Office. An attacker could exploit it to run malicious code on the victim's machine.
- CVE-2021-24108High
Remote code execution vulnerability in Microsoft Office. An attacker could exploit it to run arbitrary code on the affected system.

