WO
Product
Word
On CISA KEVExploited in the wildRansomware-linked
321
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 158Medium 52Low 2
Watch
Add Word to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36762 | 7.3 | Sep 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2016-0025 | 7.3 | Jun 16 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2026-45649 | 7.1 | Jun 9 | Office for Android Spoofing Vulnerability Affected: All versions, or not specified |
| CVE-2026-26133 | 7.1 | Mar 13 | M365 Copilot Information Disclosure Vulnerability Affected: before 2.106.2; before 16.0.19822.20038 |
| CVE-2025-54905 | 7.1 | Sep 9 | Microsoft Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2016-7291 | 7.1 | Dec 20 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: 2007; 2010 |
| CVE-2016-7290 | 7.1 | Dec 20 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: 2007; 2010 |
| CVE-2016-7268 | 7.1 | Dec 20 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and… Affected: 2007 |
| CVE-2025-62555 | 7.0 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2025-59221 | 7.0 | Oct 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2025-49699 | 7.0 | Jul 8 | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2016; 2016 |
| CVE-2025-24078 | 7.0 | Mar 11 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally Affected: 2016; 2016 |
| CVE-2020-16933 | 7.0 | Oct 16 | <p>A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files Affected: 2010; 2013; 2013; 2016 |
| CVE-2026-80090 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-78520 | 6.5 | Sep 8 | Microsoft Office Outlook Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-78522 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-80079 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-78503 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-77911 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-78502 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-69719 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-69734 | 6.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2019-1461 | 6.5 | Dec 10 | A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service… Affected: 2010; 2013; 2016 |
| CVE-2018-0950 | 6.5 | Apr 12 | An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka… Affected: 2007; 2010; 2013; 2013; 2016 |
| CVE-2016-7233 | 6.5 | Nov 10 | Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint… Affected: 2007; 2010 |
| CVE-2025-53736 | 6.2 | Aug 12 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally Affected: 2016; 2016 |
| CVE-2026-83949 | 5.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-83951 | 5.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-78506 | 5.5 | Sep 8 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-66809 | 5.5 | Aug 11 | Microsoft Office Graphics Component Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-66810 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-66806 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-64917 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-63531 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-63530 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-63528 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-70318 | 5.5 | Aug 11 | Microsoft Excel Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-70310 | 5.5 | Aug 11 | Microsoft Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-63521 | 5.5 | Aug 11 | Microsoft Office Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-55142 | 5.5 | Jul 14 | Microsoft Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-55124 | 5.5 | Jul 14 | Microsoft Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-55050 | 5.5 | Jul 14 | Microsoft Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2026-42832 | 5.5 | May 12 | Microsoft Office Spoofing Vulnerability Affected: before 16.0.19822.20190 |
| CVE-2026-41101 | 5.5 | May 12 | Microsoft Word for Android Spoofing Vulnerability Affected: before 16.0.19822.20190 |
| CVE-2026-35440 | 5.5 | May 12 | Microsoft Word Information Disclosure Vulnerability Affected: 2016; 2016 |
| CVE-2024-49065 | 5.5 | Dec 12 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2022-41103 | 5.5 | Nov 9 | Microsoft Word Information Disclosure Vulnerability Affected: 2013; 2013; 2016 |
| CVE-2022-41060 | 5.5 | Nov 9 | Microsoft Word Information Disclosure Vulnerability Affected: 2013; 2013; 2016 |
| CVE-2022-29107 | 5.5 | May 10 | Microsoft Office Security Feature Bypass Vulnerability Affected: 2013; 2013; 2013; 2016; 2016 |
| CVE-2022-24511 | 5.5 | Mar 9 | Microsoft Office Word Tampering Vulnerability Affected: 2013; 2016 |