OL
Product
Office Long Term Servicing Channel
On CISA KEVExploited in the wild
366
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 309Medium 50Low 2
Watch
Add Office Long Term Servicing Channel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38189 In wildKEV | 8.8 | Aug 13 | Microsoft Project Remote Code Execution Vulnerability Affected: 2021; 2021 |
| CVE-2026-21514 In wildKEV | 7.8 | Feb 10 | Microsoft Word Security Feature Bypass Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-21509 In wildKEV | 7.8 | Jan 26 | Microsoft Office Security Feature Bypass Vulnerability Affected: 2021; 2021; 2024; 2024 |
| CVE-2024-38226 In wildKEV | 7.3 | Sep 10 | Microsoft Publisher Security Feature Bypass Vulnerability Affected: 2021; 2021 |
| CVE-2026-40420 | 8.8 | May 12 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 2021; 2021; 2024; 2024 |
| CVE-2026-35436 | 8.8 | May 12 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 2021; 2021; 2024; 2024 |
| CVE-2024-38021 | 8.8 | Jul 9 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 2021 |
| CVE-2024-30103 | 8.8 | Jun 11 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 2021; 2021 |
| CVE-2024-21378 | 8.8 | Feb 13 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 2021 |
| CVE-2023-33153 | 8.8 | Jul 11 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 2021; 2021 |
| CVE-2023-33131 | 8.8 | Jun 14 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 2021; 2021 |
| CVE-2022-41106 | 8.8 | Nov 9 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2021 |
| CVE-2022-34717 | 8.8 | Aug 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 2021; 2021 |
| CVE-2022-21840 | 8.8 | Jan 11 | Microsoft Office Remote Code Execution Vulnerability Affected: 2021; 2021; 2021 |
| CVE-2025-47994 | 8.6 | Jul 8 | Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2026-40367 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-40361 | 8.4 | May 12 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-40358 | 8.4 | May 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-40366 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-40364 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-40363 | 8.4 | May 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-33115 | 8.4 | Apr 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-33114 | 8.4 | Apr 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-32190 | 8.4 | Apr 14 | Microsoft Office Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-20953 | 8.4 | Jan 13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-20952 | 8.4 | Jan 13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-20944 | 8.4 | Jan 13 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2021; 2024 |
| CVE-2025-54910 | 8.4 | Sep 9 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-53784 | 8.4 | Aug 12 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-53740 | 8.4 | Aug 12 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-53733 | 8.4 | Aug 12 | Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-53731 | 8.4 | Aug 12 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-49697 | 8.4 | Jul 8 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-49696 | 8.4 | Jul 8 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-49695 | 8.4 | Jul 8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-47957 | 8.4 | Jun 10 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2021; 2024 |
| CVE-2025-47953 | 8.4 | Jun 10 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2024 |
| CVE-2025-47167 | 8.4 | Jun 10 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-47164 | 8.4 | Jun 10 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-47162 | 8.4 | Jun 10 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-21362 | 8.4 | Jan 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2023-36569 | 8.4 | Oct 10 | Microsoft Office Elevation of Privilege Vulnerability Affected: 2021 |
| CVE-2026-40418 | 7.8 | May 12 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 2021; 2021; 2024; 2024 |
| CVE-2026-40362 | 7.8 | May 12 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-40359 | 7.8 | May 12 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-42831 | 7.8 | May 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 2021 |
| CVE-2026-40419 | 7.8 | May 12 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 2021; 2021; 2024; 2024 |
| CVE-2026-40360 | 7.8 | May 12 | Microsoft Excel Information Disclosure Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2026-32200 | 7.8 | Apr 14 | Microsoft PowerPoint Remote Code Execution Vulnerability Affected: 2021; 2021; 2024; 2024 |
| CVE-2026-32199 | 7.8 | Apr 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2021; 2021; 2021; 2024; 2024; 2024 |