What’s Vulnerable › Products
Microsoft Office vulnerabilities
1026 known vulnerabilities, 34 confirmed exploited in the wild (CISA KEV), 81 published in the last 12 months.
Check whether your Microsoft Office version is affected
Exploited Microsoft Office vulnerabilities
- CVE-2009-0238 — Microsoft Office Remote Code Execution
- CVE-2012-1854 — Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
- CVE-2026-21509 — Microsoft Office Security Feature Bypass Vulnerability
- CVE-2007-0671 — Microsoft Office Excel Remote Code Execution Vulnerability
- CVE-2023-36761 — Microsoft Word Information Disclosure Vulnerability
- CVE-2023-23397 — Microsoft Office Outlook Privilege Escalation Vulnerability
- CVE-2013-1331 — Microsoft Office Buffer Overflow Vulnerability
- CVE-2009-0563 — Microsoft Office Buffer Overflow Vulnerability
- CVE-2009-0557 — Microsoft Office Object Record Corruption Vulnerability
- CVE-2006-2492 — Microsoft Word Malformed Object Pointer Vulnerability
- CVE-2021-38646 — Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
- CVE-2015-1770 — Microsoft Office Uninitialized Memory Use Vulnerability
- CVE-2019-1297 — Microsoft Excel Remote Code Execution Vulnerability
- CVE-2017-0261 — Microsoft Office Use-After-Free Vulnerability
- CVE-2016-7193 — Microsoft Office Memory Corruption Vulnerability
- CVE-2015-2545 — Microsoft Office Malformed EPS File Vulnerability
- CVE-2015-2424 — Microsoft PowerPoint Memory Corruption Vulnerability
- CVE-2015-1642 — Microsoft Office Memory Corruption Vulnerability
- CVE-2012-1856 — Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
- CVE-2010-3333 — Microsoft Office Stack-based Buffer Overflow Vulnerability
- CVE-2009-3129 — Microsoft Excel Featheader Record Memory Corruption Vulnerability
- CVE-2017-8570 — Microsoft Office Remote Code Execution Vulnerability
- CVE-2014-1761 — Microsoft Word Memory Corruption Vulnerability
- CVE-2013-3906 — Microsoft Graphics Component Memory Corruption Vulnerability
- CVE-2017-0262 — Microsoft Office Remote Code Execution Vulnerability
Latest Microsoft Office vulnerabilities
- CVE-2026-81955 — Windows Graphics Component Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-70105 — Microsoft Word Information Disclosure Vulnerability (CVSS 7.5)
- CVE-2026-55054 — Microsoft Excel Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-47293 — Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 7.0)
- CVE-2026-42832 — Microsoft Office Spoofing Vulnerability (CVSS 5.5)
- CVE-2026-42831 — Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2026-40421 — Microsoft Word Information Disclosure Vulnerability (CVSS 4.3)
- CVE-2026-40420 — Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2026-40419 — Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 7.8)
- CVE-2026-40418 — Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 7.8)
- CVE-2026-40367 — Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4)
- CVE-2026-40366 — Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4)
- CVE-2026-40364 — Microsoft Word Remote Code Execution Vulnerability (CVSS 8.4)
- CVE-2026-40363 — Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4)
- CVE-2026-40362 — Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2026-40361 — Microsoft Outlook and Word Remote Code Execution Vulnerability (CVSS 8.4)
- CVE-2026-40360 — Microsoft Excel Information Disclosure Vulnerability (CVSS 7.8)
- CVE-2026-40359 — Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2026-40358 — Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4)
- CVE-2026-35440 — Microsoft Word Information Disclosure Vulnerability (CVSS 5.5)
- CVE-2026-35436 — Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2026-32200 — Microsoft PowerPoint Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2026-32199 — Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2026-32198 — Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2026-32197 — Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8)