Microsoft Microsoft Office 2019 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft Office 2019: 386 record(s), with affected versions and fixes.
CVE-2025-54898
High · 7.8
CWE-125 Sep 9, 2025
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-54896
High · 7.8
CWE-416 Sep 9, 2025
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2024-38226
High · 7.3
KEV High · 54 CWE-693 Sep 10, 2024
Microsoft Publisher Protection Mechanism Failure Vulnerability
Microsoft Publisher Security Feature Bypass Vulnerability
CVE-2024-38189
High · 8.8
KEV High · 55 CWE-20 Aug 13, 2024
Microsoft Project Remote Code Execution Vulnerability
Microsoft Project Remote Code Execution Vulnerability
CVE-2024-21413
Critical · 9.8
KEV High · 69 Public exploit CWE-20 Feb 13, 2024
Microsoft Outlook Improper Input Validation Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-35636
Medium · 6.5
CWE-200 Dec 12, 2023
Microsoft Outlook Information Disclosure Vulnerability
Microsoft Outlook Information Disclosure Vulnerability
CVE-2023-36761
Medium · 6.5
KEV High · 53 CWE-20 Sep 12, 2023
Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
CVE-2023-35311
High · 8.8
KEV High · 56 CWE-367 Jul 11, 2023
Microsoft Outlook Security Feature Bypass Vulnerability
Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2023-23397
Critical · 9.8
KEV High · 66 Public exploit CWE-294 Mar 14, 2023
Microsoft Office Outlook Privilege Escalation Vulnerability
Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2021-42292
High · 7.8
KEV High · 62 Public exploit Nov 9, 2021
Microsoft Excel Security Feature Bypass
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2021-38646
High · 7.8
KEV High · 65 Ransomware Sep 15, 2021
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability