OF
Productivity
Office
On CISA KEVExploited in the wildRansomware-linked
1,557
CVEs
43
On KEV
9.8
Max CVSS
163
New 30D
Severity mix
Critical 21High 478Medium 1Low 0
Watch
Add Office to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45471 | 7.8 | Jun 9 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-45475 | 7.8 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-45469 | 7.8 | Jun 9 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-40418 | 7.8 | May 12 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 2019; 2019 |
| CVE-2026-40362 | 7.8 | May 12 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2026-40359 | 7.8 | May 12 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2026-42831 | 7.8 | May 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 2024 |
| CVE-2026-40419 | 7.8 | May 12 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 2019; 2019 |
| CVE-2026-40360 | 7.8 | May 12 | Microsoft Excel Information Disclosure Vulnerability Affected: 2019; 2019 |
| CVE-2026-32200 | 7.8 | Apr 14 | Microsoft PowerPoint Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2026-32199 | 7.8 | Apr 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2026-32198 | 7.8 | Apr 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2026-32197 | 7.8 | Apr 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2026-23657 | 7.8 | Apr 14 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-33095 | 7.8 | Apr 14 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-32189 | 7.8 | Apr 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2026-26113 | 7.8 | Mar 10 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2016; 2016; 2019; 2019 |
| CVE-2026-26112 | 7.8 | Mar 10 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2026-26110 | 7.8 | Mar 10 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2016; 2016; 2019; 2019 |
| CVE-2026-26109 | 7.8 | Mar 10 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2026-26108 | 7.8 | Mar 10 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2026-26107 | 7.8 | Mar 10 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2026-21259 | 7.8 | Feb 10 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally Affected: 2019; 2019 |
| CVE-2026-20957 | 7.8 | Jan 13 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019 |
| CVE-2026-20956 | 7.8 | Jan 13 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: All versions, or not specified |
| CVE-2026-20955 | 7.8 | Jan 13 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2026-20950 | 7.8 | Jan 13 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2026-20949 | 7.8 | Jan 13 | Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally Affected: All versions, or not specified |
| CVE-2026-20948 | 7.8 | Jan 13 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2026-20946 | 7.8 | Jan 13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62564 | 7.8 | Dec 9 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62563 | 7.8 | Dec 9 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62562 | 7.8 | Dec 9 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62561 | 7.8 | Dec 9 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62560 | 7.8 | Dec 9 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62559 | 7.8 | Dec 9 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62558 | 7.8 | Dec 9 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62557 | 7.8 | Dec 9 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2016; 2016; 2019; 2019 |
| CVE-2025-62556 | 7.8 | Dec 9 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62554 | 7.8 | Dec 9 | Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2016; 2016; 2019; 2019 |
| CVE-2025-62553 | 7.8 | Dec 9 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62552 | 7.8 | Dec 9 | Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62216 | 7.8 | Nov 11 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: All versions, or not specified |
| CVE-2025-62205 | 7.8 | Nov 11 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: All versions, or not specified |
| CVE-2025-62203 | 7.8 | Nov 11 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62201 | 7.8 | Nov 11 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62200 | 7.8 | Nov 11 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-62199 | 7.8 | Nov 11 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: All versions, or not specified |
| CVE-2025-60727 | 7.8 | Nov 11 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: 2019; 2019 |
| CVE-2025-59243 | 7.8 | Oct 14 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)