OF
Productivity
Office
On CISA KEVExploited in the wildRansomware-linked
1,557
CVEs
43
On KEV
9.8
Max CVSS
163
New 30D
Severity mix
Critical 21High 478Medium 1Low 0
Watch
Add Office to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45461 | 8.4 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-45458 | 8.4 | Jun 9 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-45456 | 8.4 | Jun 9 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-45474 | 8.4 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-45472 | 8.4 | Jun 9 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-40367 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2026-40361 | 8.4 | May 12 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2026-40358 | 8.4 | May 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2026-40366 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2026-40364 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2026-40363 | 8.4 | May 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2026-33115 | 8.4 | Apr 14 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-33114 | 8.4 | Apr 14 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-32190 | 8.4 | Apr 14 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2026-20952 | 8.4 | Jan 13 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2026-20953 | 8.4 | Jan 13 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2026-20944 | 8.4 | Jan 13 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2025-54910 | 8.4 | Sep 9 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2025-53784 | 8.4 | Aug 12 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2025-53740 | 8.4 | Aug 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2025-53733 | 8.4 | Aug 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2025-53731 | 8.4 | Aug 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2025-49697 | 8.4 | Jul 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2025-49696 | 8.4 | Jul 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2025-49695 | 8.4 | Jul 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2025-32717 | 8.4 | Jun 10 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2025-47167 | 8.4 | Jun 10 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2025-47164 | 8.4 | Jun 10 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2025-47953 | 8.4 | Jun 10 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2025-47162 | 8.4 | Jun 10 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016; 2019 |
| CVE-2025-47957 | 8.4 | Jun 10 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2025-21362 | 8.4 | Jan 14 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2023-36569 | 8.4 | Oct 10 | Microsoft Office Elevation of Privilege Vulnerability Affected: 2019 |
| CVE-2026-44822 | 8.2 | Jun 9 | Microsoft Excel Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2021-34469 | 8.2 | Jul 14 | Microsoft Office Security Feature Bypass Vulnerability Affected: 2013; 2013; 2016; 2019 |
| CVE-2026-88185 | 8.1 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-70269 | 8.1 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-100208 | 8.1 | Sep 25 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2009-2502 | 8.1 | Oct 14 | Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002… Affected: 2003; 2007; 2007; xp |
| CVE-2026-108433 | 7.8 | Oct 15 | Microsoft Office Word Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2026-88210 | 7.8 | Oct 13 | Microsoft Office Word Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2026-85340 | 7.8 | Oct 13 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-88109 | 7.8 | Oct 13 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-97009 | 7.8 | Oct 13 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-96997 | 7.8 | Oct 13 | Microsoft Office OneNote Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-97001 | 7.8 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-96996 | 7.8 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-96995 | 7.8 | Oct 13 | Microsoft Office Word Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2026-70220 | 7.8 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-62804 | 7.8 | Sep 8 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)