VendorsMicrosoftofficeall versions
Vulnerabilities

Microsoft Office

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1034CVEs
CVE-2025-47953
Microsoft Office Remote Code Execution Vulnerability
Published 2025-06-10 · Analyzed
8.4EPSS 0.005
CVE-2026-20952
Microsoft Office Remote Code Execution Vulnerability
Published 2026-01-13 · Analyzed
8.4EPSS 0.005
CVE-2025-49697
Microsoft Office Remote Code Execution Vulnerability
Published 2025-07-08 · Analyzed
8.4EPSS 0.005
CVE-2026-40367
Microsoft Word Remote Code Execution Vulnerability
Published 2026-05-12 · Modified
8.4EPSS 0.004
CVE-2025-62554
Microsoft Office Remote Code Execution Vulnerability
Published 2025-12-09 · Analyzed
8.4EPSS 0.004
CVE-2025-32704
Microsoft Excel Remote Code Execution Vulnerability
Published 2025-05-13 · Analyzed
8.4EPSS 0.004
CVE-2025-62557
Microsoft Office Remote Code Execution Vulnerability
Published 2025-12-09 · Analyzed
8.4EPSS 0.004
CVE-2025-59236
Microsoft Excel Remote Code Execution Vulnerability
Published 2025-10-14 · Analyzed
8.4EPSS 0.004
CVE-2026-26113
Microsoft Office Remote Code Execution Vulnerability
Published 2026-03-10 · Analyzed
8.4EPSS 0.004
CVE-2026-40363
Microsoft Office Remote Code Execution Vulnerability
Published 2026-05-12 · Analyzed
8.4EPSS 0.004
CVE-2026-40361
Microsoft Outlook and Word Remote Code Execution Vulnerability
Published 2026-05-12 · Modified
8.4EPSS 0.004
CVE-2026-40366
Microsoft Word Remote Code Execution Vulnerability
Published 2026-05-12 · Modified
8.4EPSS 0.004
CVE-2026-40364
Microsoft Word Remote Code Execution Vulnerability
Published 2026-05-12 · Analyzed
8.4EPSS 0.004
CVE-2026-32190
Microsoft Office Remote Code Execution Vulnerability
Published 2026-04-14 · Analyzed
8.4EPSS 0.004
CVE-2026-40358
Microsoft Office Remote Code Execution Vulnerability
Published 2026-05-12 · Modified
8.4EPSS 0.004
CVE-2026-26109
Microsoft Excel Remote Code Execution Vulnerability
Published 2026-03-10 · Analyzed
8.4EPSS 0.003
CVE-2026-26110
Microsoft Office Remote Code Execution Vulnerability
Published 2026-03-10 · Analyzed
8.4EPSS 0.003
CVE-2021-34469
Microsoft Office Security Feature Bypass Vulnerability
Published 2021-07-14 · Modified
8.2EPSS 0.037
CVE-2023-36897
Visual Studio Tools for Office Runtime Spoofing Vulnerability
Published 2023-08-08 · Modified
8.1EPSS 0.017
CVE-2026-21509
Microsoft Office Security Feature Bypass Vulnerability
Published 2026-01-26 · Analyzed
7.8KEVEPSS 0.729
CVE-2023-36041
Microsoft Excel Remote Code Execution Vulnerability
Published 2023-11-14 · Modified
7.8EPSS 0.567
CVE-2023-32029
Microsoft Excel Remote Code Execution Vulnerability
Published 2023-06-13 · Modified
7.8EPSS 0.535
CVE-2021-34478
Microsoft Office Remote Code Execution Vulnerability
Published 2021-08-12 · Modified
7.8EPSS 0.512
CVE-2021-42292
Microsoft Excel Security Feature Bypass Vulnerability
Published 2021-11-10 · Analyzed
7.8KEVEPSS 0.430
CVE-2007-3282
Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the DeleteRecordSourceIfUnused method.
Published 2007-06-19 · Modified
7.81 PoCEPSS 0.422
CVE-2020-1349
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Code Execution Vulnerability'.
Published 2020-07-14 · Modified
7.8EPSS 0.224
CVE-2012-1854
Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Visual Basic for Applications Insecure Library Loading Vulnerability," as exploited in the wild in July 2012.
Published 2012-07-10 · Analyzed
7.8KEVEPSS 0.210
CVE-2019-0801
A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files., aka 'Office Remote Code Execution Vulnerability'.
Published 2019-04-09 · Modified
7.8EPSS 0.185
CVE-2018-0903
Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Access Remote Code Execution Vulnerability".
Published 2018-03-14 · Modified
7.8EPSS 0.160
CVE-2021-31179
Microsoft Office Remote Code Execution Vulnerability
Published 2021-05-11 · Modified
7.8EPSS 0.135
CVE-2021-31939
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-06-08 · Modified
7.8EPSS 0.133
CVE-2019-0823
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0824, CVE-2019-0825, CVE-2019-0826, CVE-2019-0827.
Published 2019-04-09 · Modified
7.8EPSS 0.105
CVE-2019-0824
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0825, CVE-2019-0826, CVE-2019-0827.
Published 2019-04-09 · Modified
7.8EPSS 0.105
CVE-2019-0825
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0824, CVE-2019-0826, CVE-2019-0827.
Published 2019-04-09 · Modified
7.8EPSS 0.105
CVE-2019-0826
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0824, CVE-2019-0825, CVE-2019-0827.
Published 2019-04-09 · Modified
7.8EPSS 0.105
CVE-2019-0827
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0824, CVE-2019-0825, CVE-2019-0826.
Published 2019-04-09 · Modified
7.8EPSS 0.105
CVE-2021-38646
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Published 2021-09-15 · Analyzed
7.8KEVEPSS 0.080
CVE-2024-43504
Microsoft Excel Remote Code Execution Vulnerability
Published 2024-10-08 · Analyzed
7.8EPSS 0.065
CVE-2021-38655
Microsoft Excel Remote Code Execution Vulnerability
Published 2021-09-15 · Modified
7.8EPSS 0.063
CVE-2021-38653
Microsoft Office Visio Remote Code Execution Vulnerability
Published 2021-09-15 · Modified
7.8EPSS 0.063
← Prev14 / 26Next →