← Back

Word

word

Vendor: Microsoft • 319 CVEs

CVEs (319)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
5365 Apps
OfficeOffice Long Term Servicing Channel+2 more
Jun 17, 2026
Dec 9, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
5365 Apps
OfficeOffice Long Term Servicing Channel+2 more
Oct 7, 2026
Dec 9, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
5365 Apps
OfficeOffice Long Term Servicing Channel+2 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
5365 Apps
OfficeOffice Long Term Servicing Channel+2 more
Jun 17, 2026
Oct 14, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
6365 Apps
OfficeOffice Long Term Servicing Channel+3 more
Jun 17, 2026
Sep 9, 2025
N/A· v4
7.1 HIGH· v3
N/A· v2
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Aug 12, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
6365 Apps
OfficeOffice Long Term Servicing Channel+3 more
Jun 17, 2026
Aug 12, 2025
N/A· v4
6.2 MEDIUM· v3
N/A· v2
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
1Microsoft
6365 Apps
OfficeOffice Long Term Servicing Channel+3 more
Jun 17, 2026
Aug 12, 2025
N/A· v4
8.4 HIGH· v3
N/A· v2
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
5365 Apps
OfficeOffice Long Term Servicing Channel+2 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
6365 Apps
OfficeOffice Long Term Servicing Channel+3 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
6365 Apps
OfficeOffice Long Term Servicing Channel+3 more
Jun 17, 2026
Jun 10, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
6365 Apps
OfficeOffice Long Term Servicing Channel+3 more
Jun 17, 2026
Jun 10, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Apr 8, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network.
1Microsoft
6365 Apps
OfficeOffice Long Term Servicing Channel+3 more
Jun 17, 2026
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Mar 11, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Mar 11, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
1Word
Jun 17, 2026
Dec 18, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a librar...Show more
A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.Show less
1Microsoft
5365 Apps
OfficeOffice Long Term Servicing Channel+2 more
Jun 17, 2026
Dec 12, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Microsoft Office Remote Code Execution Vulnerability