OL
Product
Office Long Term Servicing Channel
On CISA KEVExploited in the wild
366
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 309Medium 50Low 2
Watch
Add Office Long Term Servicing Channel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54908 | 7.8 | Sep 9 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-54907 | 7.8 | Sep 9 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-54906 | 7.8 | Sep 9 | Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-54904 | 7.8 | Sep 9 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-54903 | 7.8 | Sep 9 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-54902 | 7.8 | Sep 9 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-54900 | 7.8 | Sep 9 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-54899 | 7.8 | Sep 9 | Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-54898 | 7.8 | Sep 9 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-54896 | 7.8 | Sep 9 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-53761 | 7.8 | Aug 12 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-53759 | 7.8 | Aug 12 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-53741 | 7.8 | Aug 12 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-53739 | 7.8 | Aug 12 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-53738 | 7.8 | Aug 12 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-53737 | 7.8 | Aug 12 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-53735 | 7.8 | Aug 12 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-53734 | 7.8 | Aug 12 | Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-53730 | 7.8 | Aug 12 | Use after free in Microsoft Office Visio allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-49711 | 7.8 | Jul 8 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-49705 | 7.8 | Jul 8 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-49703 | 7.8 | Jul 8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-49702 | 7.8 | Jul 8 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-49700 | 7.8 | Jul 8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-49698 | 7.8 | Jul 8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-47176 | 7.8 | Jun 10 | '.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally Affected: 2024; 2024 |
| CVE-2025-47175 | 7.8 | Jun 10 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-47174 | 7.8 | Jun 10 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2024 |
| CVE-2025-47173 | 7.8 | Jun 10 | Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-47170 | 7.8 | Jun 10 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2024; 2024 |
| CVE-2025-47169 | 7.8 | Jun 10 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-47168 | 7.8 | Jun 10 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-47165 | 7.8 | Jun 10 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-32705 | 7.8 | May 13 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally Affected: 2021; 2024 |
| CVE-2025-32704 | 7.8 | May 13 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-30393 | 7.8 | May 13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-30388 | 7.8 | May 13 | Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally Affected: 2021; 2024 |
| CVE-2025-30386 | 7.8 | May 13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-30383 | 7.8 | May 13 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-30381 | 7.8 | May 13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-30379 | 7.8 | May 13 | Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-30377 | 7.8 | May 13 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-30376 | 7.8 | May 13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-30375 | 7.8 | May 13 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-29979 | 7.8 | May 13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-29978 | 7.8 | May 13 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally Affected: 2024; 2024 |
| CVE-2025-29977 | 7.8 | May 13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
| CVE-2025-29822 | 7.8 | Apr 8 | Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-29820 | 7.8 | Apr 8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2021; 2024; 2024; 2024 |
| CVE-2025-29791 | 7.8 | Apr 8 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2021; 2021; 2024; 2024 |
