OF
Productivity
Office
On CISA KEVExploited in the wildRansomware-linked
1,557
CVEs
43
On KEV
9.8
Max CVSS
163
New 30D
Severity mix
Critical 21High 478Medium 1Low 0
Watch
Add Office to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1446 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2010; 2016; 2019; 2019 |
| CVE-2020-1240 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2020-1321 | 8.8 | Jun 9 | A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution… Affected: 2016; 2019; 2019 |
| CVE-2020-1226 | 8.8 | Jun 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2016; 2019; 2019 |
| CVE-2020-1225 | 8.8 | Jun 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2016; 2019; 2019 |
| CVE-2020-0906 | 8.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2020-0760 | 8.8 | Apr 15 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability' Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2020-0850 | 8.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2016; 2019; 2019 |
| CVE-2019-1331 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016; 2016; 2019; +1 more |
| CVE-2019-1151 | 8.8 | Aug 14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts Affected: 2019 |
| CVE-2019-1149 | 8.8 | Aug 14 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts Affected: 2019 |
| CVE-2019-1111 | 8.8 | Jul 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2019-1110 | 8.8 | Jul 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: 2016; 2019 |
| CVE-2019-0585 | 8.8 | Jan 8 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution… Affected: 2010; 2016; 2019; 2019 |
| CVE-2018-8504 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code… Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2018-8502 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft Excel Remote Code… Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2018-8501 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Microsoft PowerPoint… Affected: 2010; 2013; 2013; 2016; 2019 |
| CVE-2018-8332 | 8.8 | Sep 13 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution… Affected: 2016 |
| CVE-2018-1030 | 8.8 | Apr 12 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution… Affected: 2013; 2016; 2016 |
| CVE-2018-1028 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code… Affected: 2013; 2013_rt; 2016 |
| CVE-2018-1026 | 8.8 | Apr 12 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution… Affected: 2013; 2016; 2016 |
| CVE-2018-0852 | 8.8 | Feb 15 | Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote… Affected: 2016; 2016 |
| CVE-2018-0841 | 8.8 | Feb 15 | Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2016 |
| CVE-2018-0851 | 8.8 | Feb 15 | Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016… Affected: Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R). |
| CVE-2018-0862 | 8.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2018-0849 | 8.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2018-0848 | 8.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2018-0807 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2018-0806 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2018-0805 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2018-0804 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2018-0801 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way… Affected: 2007; 2010; 2013; 2016; 2016 |
| CVE-2018-0796 | 8.8 | Jan 10 | Microsoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way… Affected: 2016 |
| CVE-2018-0795 | 8.8 | Jan 10 | Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft… Affected: 2010; 2016; 2016 |
| CVE-2018-0794 | 8.8 | Jan 10 | Microsoft Word in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way… Affected: 2010; 2016; 2016 |
| CVE-2018-0792 | 8.8 | Jan 10 | Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution… Affected: 2016; 2016 |
| CVE-2017-11854 | 8.8 | Nov 15 | Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 allow an… Affected: 2010 |
| CVE-2017-8528 | 8.8 | Jun 15 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016,… Affected: 2007; 2010 |
| CVE-2017-8527 | 8.8 | Jun 15 | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server… Affected: 2007; 2010 |
| CVE-2017-8510 | 8.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2007; 2010; 2013; 2016 |
| CVE-2017-0283 | 8.8 | Jun 15 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016,… Affected: 2007; 2010 |
| CVE-2017-8512 | 8.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016, Microsoft Office Online Server 2016, Microsoft Office Web Apps 2010 Service Pack 2, Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, and Word Automation Services. |
| CVE-2017-8509 | 8.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: Microsoft Office 2007 Service Pack 3, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Word 2007, Microsoft Office 2010 Service Pack 2, Microsoft Word 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016, Microsoft Office Web Apps 2010 Service Pack 2, Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft Word 2013 RT Service Pack 1, Microsoft OneNote 2010 Service Pack 2, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, and Microsoft Word 2016 |
| CVE-2016-0183 | 8.8 | May 11 | The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allows remote attackers… Affected: 2010 |
| CVE-2016-0145 | 8.8 | Apr 12 | The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold… Affected: 2007; 2010 |
| CVE-2013-0006 | 8.8 | Jan 9 | Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka… Affected: 2003; 2007; 2007 |
| CVE-2025-47994 | 8.6 | Jul 8 | Microsoft Office Elevation of Privilege Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2026-78510 | 8.4 | Sep 8 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-55045 | 8.4 | Jul 14 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-45463 | 8.4 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)