WO
Product
Word
On CISA KEVExploited in the wildRansomware-linked
321
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 158Medium 52Low 2
Watch
Add Word to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36761 In wildKEV | 6.5 | Sep 12 | Microsoft Word Information Disclosure Vulnerability Affected: 2013; 2013; 2013; 2016; 2016 |
| CVE-2026-80090 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-78520 | 6.5 | Sep 8 | Microsoft Office Outlook Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-78522 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-80079 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-78503 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-77911 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-78502 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-69719 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-69734 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2019-1461 | 6.5 | Dec 10 | A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service… Affected: 2010; 2013; 2016 |
| CVE-2018-0950 | 6.5 | Apr 12 | An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2016-7233 | 6.5 | Nov 10 | Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint… Affected: 2007; 2010 |
| CVE-2025-53736 | 6.2 | Aug 12 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally Affected: 2016; 2016 |
| CVE-2026-83949 | 5.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-83951 | 5.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-78506 | 5.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-66809 | 5.5 | Aug 11 | Microsoft Office Graphics Component Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-66810 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-66806 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-64917 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-63531 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-63530 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-63528 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-70318 | 5.5 | Aug 11 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-70310 | 5.5 | Aug 11 | Microsoft Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-63521 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-55142 | 5.5 | Jul 14 | Microsoft Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-55124 | 5.5 | Jul 14 | Microsoft Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-55050 | 5.5 | Jul 14 | Microsoft Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-42832 | 5.5 | May 12 | Microsoft Office Spoofing Vulnerability Affected: before 16.0.19822.20190 |
| CVE-2026-41101 | 5.5 | May 12 | Microsoft Word for Android Spoofing Vulnerability Affected: before 16.0.19822.20190 |
| CVE-2026-35440 | 5.5 | May 12 | Microsoft Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2024-49065 | 5.5 | Dec 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2022-41103 | 5.5 | Nov 9 | Microsoft Word Information Disclosure Vulnerability Affected: 2013; 2013; 2016 |
| CVE-2022-41060 | 5.5 | Nov 9 | Microsoft Word Information Disclosure Vulnerability Affected: 2013; 2013; 2016 |
| CVE-2022-29107 | 5.5 | May 10 | Microsoft Office Security Feature Bypass Vulnerability Affected: 2013; 2013; 2013; 2016; 2016 |
| CVE-2022-24511 | 5.5 | Mar 9 | Microsoft Office Word Tampering Vulnerability Affected: 2013; 2016 |
| CVE-2021-31178 | 5.5 | May 11 | Microsoft Office Information Disclosure Vulnerability Affected: 2013; 2013; 2016 |
| CVE-2020-1503 | 5.5 | Aug 17 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1445 | 5.5 | Jul 14 | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability' Affected: 2010; 2013; 2013; 2016 |
| CVE-2020-1342 | 5.5 | Jul 14 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: 2010; 2013; 2013; 2016 |
| CVE-2019-0561 | 5.5 | Jan 8 | An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects… Affected: 2010; 2013; 2013; 2016 |
| CVE-2018-8378 | 5.5 | Aug 15 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 |
| CVE-2017-0105 | 5.5 | Mar 17 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: 2007 |
| CVE-2017-0029 | 5.5 | Mar 17 | Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document, aka… Affected: 2010; 2013; 2016 |
| CVE-2016-3279 | 5.5 | Jul 13 | Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word… Affected: 2010; 2013; 2016 |
| CVE-2016-3234 | 5.5 | Jun 16 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation… Affected: 2007; 2010 |
| CVE-2026-72976 | 5.0 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-40421 | 4.3 | May 12 | Microsoft Word Information Disclosure Vulnerability Affected: 2016; 2016 |