← Back

Office

office

Vendor: Microsoft • 1,034 CVEs

CVEs (1,034)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
7365 Apps
ExcelOffice+4 more
Jul 15, 2026
Jul 14, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
1Microsoft
4365 Apps
OfficeOffice 2021+1 more
Jun 17, 2026
Jun 9, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
1Microsoft
4Excel
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
May 12, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
1Microsoft
3365 Copilot
OfficeOffice Long Term Servicing Channel
Jun 17, 2026
May 12, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
May 12, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
1Microsoft
3365 Apps
OfficeOffice Long Term Servicing Channel
Jun 17, 2026
May 12, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
1Microsoft
3365 Apps
OfficeOffice Long Term Servicing Channel
Jun 17, 2026
May 12, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
1Microsoft
3365 Apps
OfficeOffice Long Term Servicing Channel
Jun 17, 2026
May 12, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
1Microsoft
5365 Apps
OfficeOffice Long Term Servicing Channel+2 more
Jun 17, 2026
May 12, 2026
N/A· v4
8.4 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
May 12, 2026
N/A· v4
8.4 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
May 12, 2026
N/A· v4
8.4 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
365 CopilotOffice+1 more
Jun 17, 2026
May 12, 2026
N/A· v4
8.4 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
1Microsoft
5365 Apps
ExcelOffice+2 more
Jun 17, 2026
May 12, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
May 12, 2026
N/A· v4
8.4 HIGH· v3
N/A· v2
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
1Microsoft
5365 Apps
ExcelOffice+2 more
Jun 17, 2026
May 12, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
1Microsoft
5365 Apps
ExcelOffice+2 more
Jun 17, 2026
May 12, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
1Microsoft
3365 Apps
OfficeOffice Long Term Servicing Channel
Jun 17, 2026
May 12, 2026
N/A· v4
8.4 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
May 12, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
1Microsoft
3365 Apps
OfficeOffice Long Term Servicing Channel
Jun 17, 2026
May 12, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.