OF
Productivity
Office
On CISA KEVExploited in the wildRansomware-linked
1,557
CVEs
43
On KEV
9.8
Max CVSS
163
New 30D
Severity mix
Critical 21High 478Medium 1Low 0
Watch
Add Office to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-69556 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-70329 | 8.8 | Aug 11 | Microsoft Outlook Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-65807 | 8.8 | Aug 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-62870 | 8.8 | Aug 3 | Microsoft Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-40420 | 8.8 | May 12 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 2019; 2019 |
| CVE-2026-35436 | 8.8 | May 12 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 2019; 2019 |
| CVE-2024-38021 | 8.8 | Jul 9 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2024-30103 | 8.8 | Jun 11 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2024-21378 | 8.8 | Feb 13 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2023-33153 | 8.8 | Jul 11 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 2013; 2013; 2013; 2016; 2016; 2019; +1 more |
| CVE-2023-33131 | 8.8 | Jun 14 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2022-41106 | 8.8 | Nov 9 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2022-34717 | 8.8 | Aug 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 2013; 2013; 2013; 2016; 2016; 2019; +1 more |
| CVE-2022-21840 | 8.8 | Jan 11 | Microsoft Office Remote Code Execution Vulnerability Affected: 2013; 2013; 2013; 2016; 2016; 2019; +2 more |
| CVE-2021-28455 | 8.8 | May 11 | Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability Affected: 2013; 2013; 2016; 2019 |
| CVE-2020-1583 | 8.8 | Aug 17 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory Affected: 2010; 2016; 2019; 2019 |
| CVE-2020-1498 | 8.8 | Aug 17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2016; 2019; 2019 |
| CVE-2020-1496 | 8.8 | Aug 17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2020-1495 | 8.8 | Aug 17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2016; 2016; 2019; 2019 |
| CVE-2020-1494 | 8.8 | Aug 17 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2016; 2019 |
| CVE-2020-1448 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2019 |
| CVE-2020-1447 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2010; 2016; 2019; 2019 |
| CVE-2020-1446 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2010; 2016; 2019; 2019 |
| CVE-2020-1240 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2020-1321 | 8.8 | Jun 9 | A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution… Affected: 2016; 2019; 2019 |
| CVE-2020-1226 | 8.8 | Jun 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2016; 2019; 2019 |
| CVE-2020-1225 | 8.8 | Jun 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2016; 2019; 2019 |
| CVE-2020-0906 | 8.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2020-0760 | 8.8 | Apr 15 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability' Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2020-0850 | 8.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2016; 2019; 2019 |
| CVE-2019-1331 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016; 2016; 2019; +1 more |
| CVE-2019-1151 | 8.8 | Aug 14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts Affected: 2019 |
| CVE-2019-1149 | 8.8 | Aug 14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts Affected: 2019 |
| CVE-2019-1111 | 8.8 | Jul 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2019-1110 | 8.8 | Jul 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2016; 2019 |
| CVE-2019-0585 | 8.8 | Jan 8 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution… Affected: 2010; 2016; 2019; 2019 |
| CVE-2018-8504 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code… Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2018-8502 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft Excel Remote Code… Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2018-8501 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Microsoft PowerPoint… Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2018-8332 | 8.8 | Sep 13 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution… Affected: 2016 |
| CVE-2018-1030 | 8.8 | Apr 12 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution… Affected: 2013; 2016; 2016 |
| CVE-2018-1028 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code… Affected: 2013; 2013_rt; 2016 |
| CVE-2018-1026 | 8.8 | Apr 12 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution… Affected: 2013; 2016; 2016 |
| CVE-2018-0852 | 8.8 | Feb 15 | Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote… Affected: 2016; 2016 |
| CVE-2018-0841 | 8.8 | Feb 15 | Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2016 |
| CVE-2018-0851 | 8.8 | Feb 15 | Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016… Affected: Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R). |
| CVE-2018-0862 | 8.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2018-0849 | 8.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2018-0848 | 8.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2018-0807 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2016; 2016 |
The 500 most important CVEs for this product (exploited first, then by severity)