Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

293 records in Office 2019 · all components

Priority CRITICAL 100KEV

Microsoft Outlook Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9466 Published 2024-02-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5435.1001 CWE-20
Priority CRITICAL 97KEV

Microsoft Project Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08194 Published 2024-08-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5461.1001 CWE-20
Priority CRITICAL 97KEV

Microsoft Outlook Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.15522 Published 2023-07-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5404.1000 +1 CWE-367
Priority CRITICAL 93KEV

Microsoft Excel Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.43005 Published 2021-11-10 Fixed in https://aka.ms/OfficeSecurityReleases, 15.0.5397.1001 +2
Priority CRITICAL 91KEV

Microsoft Publisher Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.02667 Published 2024-09-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5465.1001 CWE-693
Priority MEDIUM 51

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 48

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority MEDIUM 45

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00373 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority MEDIUM 43

Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01288 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-502
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-415
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1002 +4 CWE-122
Priority MEDIUM 42

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-416
Priority MEDIUM 42

Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-787
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-908
Priority MEDIUM 42

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00859 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-416
Priority MEDIUM 42

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1002 +4 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-416
Priority MEDIUM 42

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-121
Load more
Open these records in search →