OF
Productivity
Office
On CISA KEVExploited in the wildRansomware-linked
1,557
CVEs
43
On KEV
9.8
Max CVSS
163
New 30D
Severity mix
Critical 21High 478Medium 1Low 0
Watch
Add Office to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38189 In wildKEV | 8.8 | Aug 13 | Microsoft Project Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-35311 In wildKEV | 8.8 | Jul 11 | Microsoft Outlook Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2019-1297 In wildKEV | 8.8 | Sep 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2016 for Mac; 2019 for 32-bit editions; 2019 for 64-bit editions; 2019 for Mac |
| CVE-2019-0541 In wildKEV | 8.8 | Jan 8 | Microsoft MSHTML Remote Code Execution Vulnerability Affected: 2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions); 2013 RT Service Pack 1; 2013 Service Pack 1 (32-bit editions); 2013 Service Pack 1 (64-bit editions); 2016 (32-bit edition); +3 more |
| CVE-2018-0798 In wildKEV | 8.8 | Jan 10 | Microsoft Office Memory Corruption Vulnerability Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2015-2424 In wildKEV | 8.8 | Jul 14 | Microsoft PowerPoint Memory Corruption Vulnerability Affected: 2007; 2010; 2011; 2013; 2013 |
| CVE-2015-1770 In wildKEV | 8.8 | Jun 10 | Microsoft Office Uninitialized Memory Use Vulnerability Affected: 2013; 2013 |
| CVE-2012-1856 In wildKEV | 8.8 | Aug 15 | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability Affected: 2003; 2007; 2007; 2010 |
| CVE-2012-0158 RansomwareIn wildKEV | 8.8 | Apr 10 | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability Affected: 2003; 2007; 2007; 2010; 2010 |
| CVE-2009-0556 In wildKEV | 8.8 | Apr 3 | Microsoft Office PowerPoint Code Injection Vulnerability Affected: All versions, or not specified |
| CVE-2009-0238 In wildKEV | 8.8 | Feb 25 | Microsoft Office Remote Code Execution Affected: 2004; 2008 |
| CVE-2007-0671 In wildKEV | 8.8 | Feb 3 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 2000; 2003; 2004; xp |
| CVE-2006-2492 In wildKEV | 8.8 | May 20 | Microsoft Word Malformed Object Pointer Vulnerability Affected: 2000; 2003; 2003; xp |
| CVE-2026-21514 In wildKEV | 7.8 | Feb 10 | Microsoft Word Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2026-21509 In wildKEV | 7.8 | Jan 26 | Microsoft Office Security Feature Bypass Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2021-42292 In wildKEV | 7.8 | Nov 10 | Microsoft Excel Security Feature Bypass Vulnerability Affected: 2013; 2013; 2019 |
| CVE-2021-38646 RansomwareIn wildKEV | 7.8 | Sep 15 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability Affected: 2013; 2013 |
| CVE-2018-0802 RansomwareIn wildKEV | 7.8 | Jan 10 | Microsoft Office Memory Corruption Vulnerability Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2017-11882 RansomwareIn wildKEV | 7.8 | Nov 15 | Microsoft Office Memory Corruption Vulnerability Affected: Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016 |
| CVE-2017-11826 In wildKEV | 7.8 | Oct 13 | Microsoft Office Remote Code Execution Vulnerability Affected: Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, Office Online Server. |
| CVE-2017-11774 In wildKEV | 7.8 | Oct 13 | Microsoft Office Outlook Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2017-8570 In wildKEV | 7.8 | Jul 11 | Microsoft Office Remote Code Execution Vulnerability Affected: 2007; 2010; 2013; 2013; 2016; 2016 |
| CVE-2017-0261 In wildKEV | 7.8 | May 12 | Microsoft Office Use-After-Free Vulnerability Affected: Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 |
| CVE-2017-0262 In wildKEV | 7.8 | May 12 | Microsoft Office Remote Code Execution Vulnerability Affected: Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 |
| CVE-2017-0199 RansomwareIn wildKEV | 7.8 | Apr 12 | Microsoft Office and WordPad Remote Code Execution Vulnerability Affected: 2007; 2010; 2013; 2016 |
| CVE-2016-7193 In wildKEV | 7.8 | Oct 14 | Microsoft Office Memory Corruption Vulnerability Affected: 2007; 2010; 2016 |
| CVE-2016-3235 In wildKEV | 7.8 | Jun 16 | Microsoft Office OLE DLL Side Loading Vulnerability Affected: All versions, or not specified |
| CVE-2015-2545 In wildKEV | 7.8 | Sep 9 | Microsoft Office Malformed EPS File Vulnerability Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2015-1642 In wildKEV | 7.8 | Aug 15 | Microsoft Office Memory Corruption Vulnerability Affected: 2007; 2010; 2013 |
| CVE-2015-1641 In wildKEV | 7.8 | Apr 14 | Microsoft Office Memory Corruption Vulnerability Affected: 2010 |
| CVE-2014-1761 In wildKEV | 7.8 | Mar 24 | Microsoft Word Memory Corruption Vulnerability Affected: 2011 |
| CVE-2013-3906 In wildKEV | 7.8 | Nov 6 | Microsoft Graphics Component Memory Corruption Vulnerability Affected: 2003; 2007; 2010; 2010 |
| CVE-2013-1331 In wildKEV | 7.8 | Jun 12 | Microsoft Office Buffer Overflow Vulnerability Affected: 2003; 2011 |
| CVE-2012-1854 In wildKEV | 7.8 | Jul 10 | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability Affected: 2003; 2007; 2007; 2010; 2010; 2010; +1 more |
| CVE-2010-3333 In wildKEV | 7.8 | Nov 10 | Microsoft Office Stack-based Buffer Overflow Vulnerability Affected: 2003; 2004; 2007; 2008; 2010; 2011; +1 more |
| CVE-2009-3129 In wildKEV | 7.8 | Nov 11 | Microsoft Excel Featheader Record Memory Corruption Vulnerability Affected: 2004; 2008 |
| CVE-2009-0557 In wildKEV | 7.8 | Jun 10 | Microsoft Office Object Record Corruption Vulnerability Affected: 2000; 2003; 2004; 2007; 2007; 2008; +1 more |
| CVE-2009-0563 In wildKEV | 7.8 | Jun 10 | Microsoft Office Buffer Overflow Vulnerability Affected: 2000; 2003; 2004; 2007; 2007; 2008; +1 more |
| CVE-2021-27059 In wildKEV | 7.6 | Mar 11 | Microsoft Office Remote Code Execution Vulnerability Affected: 2010; 2013; 2013 |
| CVE-2023-21715 In wildKEV | 7.3 | Feb 14 | Microsoft Publisher Security Feature Bypass Vulnerability Affected: All versions, or not specified |
Showing 40
The 500 most important CVEs for this product (exploited first, then by severity)