WO
Product
Word
On CISA KEVExploited in the wildRansomware-linked
321
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 158Medium 52Low 2
Watch
Add Word to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0798 In wildKEV | 8.8 | Jan 10 | Microsoft Office Memory Corruption Vulnerability Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2015-2424 In wildKEV | 8.8 | Jul 14 | Microsoft PowerPoint Memory Corruption Vulnerability Affected: 2013 |
| CVE-2007-0671 In wildKEV | 8.8 | Feb 3 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 2000; 2002; 2003 |
| CVE-2006-2492 In wildKEV | 8.8 | May 20 | Microsoft Word Malformed Object Pointer Vulnerability Affected: All versions, or not specified |
| CVE-2018-0802 RansomwareIn wildKEV | 7.8 | Jan 10 | Microsoft Office Memory Corruption Vulnerability Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2017-11826 In wildKEV | 7.8 | Oct 13 | Microsoft Office Remote Code Execution Vulnerability Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2016-7193 In wildKEV | 7.8 | Oct 14 | Microsoft Office Memory Corruption Vulnerability Affected: 2010; 2011; 2013; 2013; 2016 |
| CVE-2015-1641 In wildKEV | 7.8 | Apr 14 | Microsoft Office Memory Corruption Vulnerability Affected: 2007; 2010; 2011; 2013; 2013 |
| CVE-2014-1761 In wildKEV | 7.8 | Mar 24 | Microsoft Word Memory Corruption Vulnerability Affected: 2003; 2007; 2010; 2010; 2013; 2013; +2 more |
| CVE-2012-2539 In wildKEV | 7.8 | Dec 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2003; 2007; 2007; 2010 |
| CVE-2023-36761 In wildKEV | 6.5 | Sep 12 | Microsoft Word Information Disclosure Vulnerability Affected: 2013; 2013; 2013; 2016; 2016 |
| CVE-2026-78509 | 9.8 | Sep 8 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2023-21716 | 9.8 | Feb 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2013; 2013 |
| CVE-2023-33150 | 9.6 | Jul 11 | Microsoft Office Security Feature Bypass Vulnerability Affected: 2013; 2013; 2016 |
| CVE-2024-41165 | 9.1 | Dec 18 | A library injection vulnerability exists in Microsoft Word 16.83 for macOS Affected: 16.83 for macOS |
| CVE-2026-80085 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-80080 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-78525 | 8.8 | Sep 8 | Microsoft Office Outlook Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-78521 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-78514 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-78512 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-77901 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-72973 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-72972 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-78517 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-78504 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-78511 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-69764 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-69759 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-69722 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-69686 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-69671 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-69556 | 8.8 | Sep 8 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2020-1583 | 8.8 | Aug 17 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1448 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2013; 2016 |
| CVE-2020-1447 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2010; 2013; 2016 |
| CVE-2020-1446 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2010; 2013; 2016 |
| CVE-2020-1223 | 8.8 | Jun 9 | A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To exploit the vulnerability, an attacker would have to… Affected: All versions, or not specified |
| CVE-2020-0760 | 8.8 | Apr 15 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability' Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-0850 | 8.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2013; 2013; 2016 |
| CVE-2019-0585 | 8.8 | Jan 8 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution… Affected: 2010; 2013; 2013; 2016 |
| CVE-2018-8504 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code… Affected: 2010; 2013; 2013; 2016 |
| CVE-2018-0862 | 8.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2018-0849 | 8.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2018-0848 | 8.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2018-0807 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2018-0806 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2018-0805 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2018-0804 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2018-0801 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way… Affected: 2007; 2010; 2013; 2013; 2016 |