OF
Productivity
Office
On CISA KEVExploited in the wildRansomware-linked
1,557
CVEs
43
On KEV
9.8
Max CVSS
163
New 30D
Severity mix
Critical 21High 478Medium 1Low 0
Watch
Add Office to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21413 In wildKEV | 9.8 | Feb 13 | Microsoft Outlook Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-23397 In wildKEV | 9.8 | Mar 14 | Microsoft Outlook Elevation of Privilege Vulnerability Affected: 2019 |
| CVE-2026-70242 | 9.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97749 | 9.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-97016 | 9.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-88178 | 9.8 | Oct 13 | Microsoft Office PowerPoint Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-88156 | 9.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-70300 | 9.8 | Oct 13 | Microsoft Office Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-70291 | 9.8 | Oct 13 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-78509 | 9.8 | Sep 8 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2025-53766 | 9.8 | Aug 12 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network Affected: before 16.0.14326.22618 |
| CVE-2023-36765 | 9.8 | Sep 12 | Microsoft Office Elevation of Privilege Vulnerability Affected: 2019 |
| CVE-2023-21716 | 9.8 | Feb 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2019 |
| CVE-2020-0901 | 9.8 | May 21 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2013; 2016; 2016; 2019; +1 more |
| CVE-2019-1449 | 9.8 | Nov 12 | A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any… Affected: 2019 |
| CVE-2019-1205 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2016; 2019; 2019 |
| CVE-2016-7182 | 9.8 | Oct 14 | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10… Affected: 2007; 2010 |
| CVE-2008-0081 | 9.8 | Jan 16 | Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via… Affected: 2004 |
| CVE-2023-33150 | 9.6 | Jul 11 | Microsoft Office Security Feature Bypass Vulnerability Affected: 2019; 2019 |
| CVE-2016-7277 | 9.6 | Dec 20 | Microsoft Office 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory… Affected: 2016 |
| CVE-2019-1109 | 9.1 | Jul 15 | A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully… Affected: 2013; 2013; 2016; 2019 |
Showing 21
The 500 most important CVEs for this product (exploited first, then by severity)