OF
Productivity
Office
On CISA KEVExploited in the wildRansomware-linked
1,557
CVEs
43
On KEV
9.8
Max CVSS
163
New 30D
Severity mix
Critical 21High 478Medium 1Low 0
Watch
Add Office to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-78509 | 9.8 | Sep 8 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2025-53766 | 9.8 | Aug 12 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network Affected: before 16.0.14326.22618 |
| CVE-2023-36765 | 9.8 | Sep 12 | Microsoft Office Elevation of Privilege Vulnerability Affected: 2019 |
| CVE-2023-21716 | 9.8 | Feb 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2020-0901 | 9.8 | May 21 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016; 2016; 2019; +1 more |
| CVE-2019-1449 | 9.8 | Nov 12 | A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any… Affected: 2019 |
| CVE-2019-1205 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2016; 2019; 2019 |
| CVE-2016-7182 | 9.8 | Oct 14 | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10… Affected: 2007; 2010 |
| CVE-2008-0081 | 9.8 | Jan 16 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via… Affected: 2004 |
| CVE-2023-33150 | 9.6 | Jul 11 | Microsoft Office Security Feature Bypass Vulnerability Affected: 2019; 2019 |
| CVE-2016-7277 | 9.6 | Dec 20 | Microsoft Office 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory… Affected: 2016 |
| CVE-2019-1109 | 9.1 | Jul 15 | A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully… Affected: 2013; 2013; 2016; 2019 |
| CVE-2026-108451 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108450 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108449 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108447 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108446 | 8.8 | Oct 15 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108445 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108444 | 8.8 | Oct 15 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108443 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108442 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108441 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108440 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108439 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108437 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108432 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108431 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108430 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108429 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108428 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108427 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-108426 | 8.8 | Oct 15 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97781 | 8.8 | Oct 13 | Microsoft Office OneNote Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-100212 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-100210 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-100209 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-100211 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97745 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97768 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97772 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97775 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97763 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97741 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97004 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97746 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97742 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97738 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97757 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97011 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97762 | 8.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
