VendorsMicrosoftoffice2019
Vulnerabilities

Microsoft Office 2019

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

507CVEs
CVE-2026-21260
Microsoft Outlook Spoofing Vulnerability
Published 2026-02-10 · Analyzed
7.5EPSS 0.015
CVE-2023-29335
Microsoft Word Security Feature Bypass Vulnerability
Published 2023-05-09 · Modified
7.5EPSS 0.012
CVE-2026-70105
Microsoft Word Information Disclosure Vulnerability
Published 2026-08-20 · Analyzed
7.5EPSS 0.010
CVE-2025-29816
Microsoft Word Security Feature Bypass Vulnerability
Published 2025-04-08 · Analyzed
7.5EPSS 0.005
CVE-2025-29792
Microsoft Office Elevation of Privilege Vulnerability
Published 2025-04-08 · Analyzed
7.3EPSS 0.011
CVE-2023-36762
Microsoft Word Remote Code Execution Vulnerability
Published 2023-09-12 · Modified
7.3EPSS 0.008
CVE-2022-33631
Microsoft Excel Security Feature Bypass Vulnerability
Published 2022-08-09 · Modified
7.3EPSS 0.008
CVE-2019-1461
A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service Vulnerability'.
Published 2019-12-10 · Modified
7.1EPSS 0.046
CVE-2023-21741
Microsoft Office Visio Information Disclosure Vulnerability
Published 2023-01-10 · Modified
7.1EPSS 0.018
CVE-2025-59235
Microsoft Excel Information Disclosure Vulnerability
Published 2025-10-14 · Analyzed
7.1EPSS 0.007
CVE-2025-54905
Microsoft Word Information Disclosure Vulnerability
Published 2025-09-09 · Analyzed
7.1EPSS 0.006
CVE-2023-23398
Microsoft Excel Spoofing Vulnerability
Published 2023-03-14 · Modified
7.1EPSS 0.006
CVE-2025-60726
Microsoft Excel Information Disclosure Vulnerability
Published 2025-11-11 · Analyzed
7.1EPSS 0.006
CVE-2026-32188
Microsoft Excel Information Disclosure Vulnerability
Published 2026-04-14 · Analyzed
7.1EPSS 0.005
CVE-2025-62202
Microsoft Excel Information Disclosure Vulnerability
Published 2025-11-11 · Analyzed
7.1EPSS 0.005
CVE-2025-59232
Microsoft Excel Information Disclosure Vulnerability
Published 2025-10-14 · Analyzed
7.1EPSS 0.005
CVE-2021-27055
Microsoft Visio Security Feature Bypass Vulnerability
Published 2021-03-11 · Modified
7.0EPSS 0.025
CVE-2025-24078
Microsoft Word Remote Code Execution Vulnerability
Published 2025-03-11 · Analyzed
7.0EPSS 0.006
CVE-2025-62555
Microsoft Word Remote Code Execution Vulnerability
Published 2025-12-09 · Analyzed
7.0EPSS 0.005
CVE-2023-36568
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Published 2023-10-10 · Modified
7.0EPSS 0.004
CVE-2024-49059
Microsoft Office Elevation of Privilege Vulnerability
Published 2024-12-10 · Analyzed
7.0EPSS 0.004
CVE-2023-36565
Microsoft Office Graphics Elevation of Privilege Vulnerability
Published 2023-10-10 · Modified
7.0EPSS 0.004
CVE-2025-59221
Microsoft Word Remote Code Execution Vulnerability
Published 2025-10-14 · Analyzed
7.0EPSS 0.004
CVE-2025-49699
Microsoft Office Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
7.0EPSS 0.003
CVE-2026-47293
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Published 2026-06-09 · Analyzed
7.0EPSS 0.003
CVE-2020-17063
Microsoft Office Online Spoofing Vulnerability
Published 2020-11-11 · Modified
6.8EPSS 0.016
CVE-2025-53736
Microsoft Word Information Disclosure Vulnerability
Published 2025-08-12 · Analyzed
6.8EPSS 0.005
CVE-2025-47171
Microsoft Outlook Remote Code Execution Vulnerability
Published 2025-06-10 · Analyzed
6.71 PoCEPSS 0.017
CVE-2024-38173
Microsoft Outlook Remote Code Execution Vulnerability
Published 2024-08-13 · Analyzed
6.7EPSS 0.007
CVE-2025-21357
Microsoft Outlook Remote Code Execution Vulnerability
Published 2025-01-14 · Analyzed
6.7EPSS 0.006
CVE-2023-36413
Microsoft Office Security Feature Bypass Vulnerability
Published 2023-11-14 · Modified
6.5EPSS 0.300
CVE-2023-36761
Microsoft Word Information Disclosure Vulnerability
Published 2023-09-12 · Analyzed
6.5KEVEPSS 0.196
CVE-2023-35636
Microsoft Outlook Information Disclosure Vulnerability
Published 2023-12-12 · Modified
6.5EPSS 0.177
CVE-2019-0559
An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.
Published 2019-01-08 · Modified
6.5EPSS 0.068
CVE-2019-0669
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
Published 2019-03-06 · Modified
6.5EPSS 0.064
CVE-2018-8579
An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8558.
Published 2018-11-14 · Modified
6.5EPSS 0.063
CVE-2018-8558
An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Online Admin Center, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8579.
Published 2018-11-14 · Modified
6.5EPSS 0.056
CVE-2020-1322
An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'.
Published 2020-06-09 · Modified
6.5EPSS 0.055
CVE-2019-1084
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients., aka 'Microsoft Exchange Information Disclosure Vulnerability'.
Published 2019-07-15 · Modified
6.5EPSS 0.053
CVE-2020-0696
A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.
Published 2020-02-11 · Modified
6.5EPSS 0.050
← Prev11 / 13Next →