Skip to content
THREATWIRE

CVE Tracker · Microsoft

Microsoft Office / 365 CVEs

42 Office / 365 CVEs in the tracker, 42 in the CISA KEV catalogue.

All Microsoft CVEs · RSS feed for Microsoft Office / 365 · Tracker data last updated 18 Oct 2026. Ranges come from the product data in KEV and NVD and can overlap when a CVE names several products.

Showing 42 of 42

  1. CVE-2017-11882CVSS 7.8 highEPSS 100%KEV2017-11-15

    Office. Microsoft Office Memory Corruption Vulnerability

  2. CVE-2017-0199CVSS 7.8 highEPSS 99.5%KEV2017-04-12

    Office and WordPad. Microsoft Office and WordPad Remote Code Execution Vulnerability

  3. CVE-2026-42897No CVSSEPSS 0.52%KEV

    Microsoft. Microsoft Exchange Server Cross-Site Scripting Vulnerability

  4. CVE-2026-21514No CVSSEPSS 1.59%KEV

    Office. Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

  5. CVE-2026-21509No CVSSEPSS 70.8%KEV

    Office. Microsoft Office Security Feature Bypass Vulnerability

  6. CVE-2024-21413No CVSSEPSS 94.7%KEV

    Office Outlook. Microsoft Outlook Improper Input Validation Vulnerability

  7. CVE-2023-36761No CVSSEPSS 19.6%KEV

    Word. Microsoft Word Information Disclosure Vulnerability

  8. CVE-2023-35311No CVSSEPSS 15.5%KEV

    Outlook. Microsoft Outlook Security Feature Bypass Vulnerability

  9. CVE-2023-23397No CVSSEPSS 97.2%KEV

    Office. Microsoft Office Outlook Privilege Escalation Vulnerability

  10. CVE-2023-21715No CVSSEPSS 12.0%KEV

    Office. Microsoft Office Publisher Security Feature Bypass Vulnerability

  11. CVE-2021-42292No CVSSEPSS 43.0%KEV

    Office. Microsoft Excel Security Feature Bypass

  12. CVE-2021-38646No CVSSEPSS 7.99%KEV

    Office. Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

  13. CVE-2021-27059No CVSSEPSS 6.08%KEV

    Office. Microsoft Office Remote Code Execution Vulnerability

  14. CVE-2019-1297No CVSSEPSS 21.8%KEV

    Excel. Microsoft Excel Remote Code Execution Vulnerability

  15. CVE-2018-0802No CVSSEPSS 93.3%KEV

    Office. Microsoft Office Memory Corruption Vulnerability

  16. CVE-2018-0798No CVSSEPSS 95.1%KEV

    Office. Microsoft Office Memory Corruption Vulnerability

  17. CVE-2017-8570No CVSSEPSS 89.9%KEV

    Office. Microsoft Office Remote Code Execution Vulnerability

  18. CVE-2017-11826No CVSSEPSS 81.3%KEV

    Office. Microsoft Office Remote Code Execution Vulnerability

  19. CVE-2017-11774No CVSSEPSS 59.6%KEV

    Office. Microsoft Office Outlook Security Feature Bypass Vulnerability

  20. CVE-2017-0262No CVSSEPSS 81.0%KEV

    Office. Microsoft Office Remote Code Execution Vulnerability

  21. CVE-2017-0261No CVSSEPSS 78.1%KEV

    Office. Microsoft Office Use-After-Free Vulnerability

  22. CVE-2016-7262No CVSSEPSS 57.7%KEV

    Excel. Microsoft Office Security Feature Bypass Vulnerability

  23. CVE-2016-7193No CVSSEPSS 57.6%KEV

    Office. Microsoft Office Memory Corruption Vulnerability

  24. CVE-2016-3235No CVSSEPSS 43.3%KEV

    Office. Microsoft Office OLE DLL Side Loading Vulnerability

  25. CVE-2015-2545No CVSSEPSS 85.9%KEV

    Office. Microsoft Office Malformed EPS File Vulnerability

  26. CVE-2015-2424No CVSSEPSS 40.4%KEV

    PowerPoint. Microsoft PowerPoint Memory Corruption Vulnerability

  27. CVE-2015-1770No CVSSEPSS 35.0%KEV

    Office. Microsoft Office Uninitialized Memory Use Vulnerability

  28. CVE-2015-1642No CVSSEPSS 53.1%KEV

    Office. Microsoft Office Memory Corruption Vulnerability

  29. CVE-2015-1641No CVSSEPSS 97.2%KEV

    Office. Microsoft Office Memory Corruption Vulnerability

  30. CVE-2014-1761No CVSSEPSS 77.7%KEV

    Word. Microsoft Word Memory Corruption Vulnerability

  31. CVE-2013-1331No CVSSEPSS 79.8%KEV

    Office. Microsoft Office Buffer Overflow Vulnerability

  32. CVE-2012-2539No CVSSEPSS 53.0%KEV

    Word. Microsoft Word Remote Code Execution Vulnerability

  33. CVE-2012-1856No CVSSEPSS 72.0%KEV

    Office. Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

  34. CVE-2010-3333No CVSSEPSS 89.4%KEV

    Office. Microsoft Office Stack-based Buffer Overflow Vulnerability

  35. CVE-2010-2572No CVSSEPSS 58.6%KEV

    PowerPoint. Microsoft PowerPoint Buffer Overflow Vulnerability

  36. CVE-2009-3129No CVSSEPSS 84.0%KEV

    Excel. Microsoft Excel Featheader Record Memory Corruption Vulnerability

  37. CVE-2009-0563No CVSSEPSS 62.8%KEV

    Office. Microsoft Office Buffer Overflow Vulnerability

  38. CVE-2009-0557No CVSSEPSS 53.0%KEV

    Office. Microsoft Office Object Record Corruption Vulnerability

  39. CVE-2009-0556No CVSSEPSS 67.3%KEV

    Office. Microsoft Office PowerPoint Code Injection Vulnerability

  40. CVE-2009-0238No CVSSEPSS 42.9%KEV

    Office. Microsoft Office Remote Code Execution

  41. CVE-2007-0671No CVSSEPSS 43.2%KEV

    Office. Microsoft Office Excel Remote Code Execution Vulnerability

  42. CVE-2006-2492No CVSSEPSS 48.1%KEV

    Word. Microsoft Word Malformed Object Pointer Vulnerability