WO
Product
Word
On CISA KEVExploited in the wildRansomware-linked
321
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 158Medium 52Low 2
Watch
Add Word to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0795 | 8.8 | Jan 10 | Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft… Affected: 2013; 2013 |
| CVE-2018-0794 | 8.8 | Jan 10 | Microsoft Word in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2018-0792 | 8.8 | Jan 10 | Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution… Affected: 2016 |
| CVE-2017-11854 | 8.8 | Nov 15 | Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 allow an… Affected: 2007; 2010 |
| CVE-2017-8510 | 8.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2013 |
| CVE-2017-8509 | 8.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2016-0183 | 8.8 | May 11 | The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allows remote attackers… Affected: 2010 |
| CVE-2026-45458 | 8.4 | Jun 9 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-40367 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-40361 | 8.4 | May 12 | Microsoft Outlook and Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-40366 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-40364 | 8.4 | May 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2025-53733 | 8.4 | Aug 12 | Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016; 2016 |
| CVE-2026-64915 | 7.8 | Aug 11 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-64907 | 7.8 | Aug 11 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-64905 | 7.8 | Aug 11 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-63527 | 7.8 | Aug 11 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-63525 | 7.8 | Aug 11 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-70311 | 7.8 | Aug 11 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-63518 | 7.8 | Aug 11 | Microsoft Office Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-55130 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-55128 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-55134 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-55132 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-55038 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-55055 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-55127 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-55033 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-55032 | 7.8 | Jul 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-44812 | 7.8 | Jun 9 | Windows Graphics Component Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-44803 | 7.8 | Jun 9 | Windows Graphics Component Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2026-45471 | 7.8 | Jun 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-20948 | 7.8 | Jan 13 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2025-62559 | 7.8 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2025-62558 | 7.8 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2025-62562 | 7.8 | Dec 9 | Microsoft Outlook Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2025-59222 | 7.8 | Oct 14 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016; 2016 |
| CVE-2025-53738 | 7.8 | Aug 12 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016; 2016 |
| CVE-2025-49703 | 7.8 | Jul 8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016; 2016 |
| CVE-2025-49700 | 7.8 | Jul 8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016; 2016 |
| CVE-2025-49698 | 7.8 | Jul 8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016; 2016 |
| CVE-2025-47169 | 7.8 | Jun 10 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016 |
| CVE-2025-47168 | 7.8 | Jun 10 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016 |
| CVE-2025-27747 | 7.8 | Apr 8 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016 |
| CVE-2025-24079 | 7.8 | Mar 11 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016; 2016 |
| CVE-2024-21379 | 7.8 | Feb 13 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2024-20673 | 7.8 | Feb 13 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2022-41061 | 7.8 | Nov 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 2013; 2013; 2016 |
| CVE-2022-26903 | 7.8 | Apr 15 | Windows Graphics Component Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-21842 | 7.8 | Jan 11 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |