Microsoft Microsoft Office for Android vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft Office for Android: 24 record(s), with affected versions and fixes.
CVE-2026-85881
High · 8.0
CWE-121 Oct 13, 2026
Microsoft Office Graphics Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
CVE-2026-105731
Medium · 5.5
CWE-908 Oct 13, 2026
Microsoft Office Graphics Component Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.
CVE-2026-78439
High · 8.8
CWE-121 Sep 8, 2026
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-56176
High · 7.8
CWE-125 Jul 14, 2026
Windows Win32k Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
CVE-2026-50387
High · 7.8
CWE-121 Jul 14, 2026
Windows GDI Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
CVE-2026-45474
High · 8.4
CWE-787 Jun 9, 2026
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45472
High · 8.4
CWE-787 Jun 9, 2026
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45463
High · 8.4
CWE-121 Jun 9, 2026
Microsoft Office Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45461
High · 8.4
CWE-787 Jun 9, 2026
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-45460
Medium · 4.7
CWE-126 Jun 9, 2026
Microsoft Office Information Disclosure Vulnerability
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-42831
High · 7.8
CWE-122 May 12, 2026
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-40363
High · 8.4
CWE-122 May 12, 2026
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-26134
High · 7.8
CWE-190 Mar 10, 2026
Microsoft Office Elevation of Privilege Vulnerability
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-26110
High · 7.8
CWE-843 Mar 10, 2026
Microsoft Office Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-25180
Medium · 5.5
CWE-125 Mar 10, 2026
Windows Graphics Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.
CVE-2026-24285
High · 7.0
CWE-416 Mar 10, 2026
Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-20846
High · 7.5
CWE-126 Feb 10, 2026
GDI+ Denial of Service Vulnerability
Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.
CVE-2025-62557
High · 7.8
CWE-416 Dec 9, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62554
High · 7.8
CWE-843 Dec 9, 2025
Microsoft Office Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62199
High · 7.8
CWE-416 Nov 11, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-60724
Critical · 9.8
CWE-122 Nov 11, 2025
GDI+ Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2025-59234
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59227
High · 7.8
CWE-416 Oct 14, 2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2023-21823
High · 7.8
KEV High · 61 Public exploit CWE-190 Feb 14, 2023
Microsoft Windows Graphic Component Privilege Escalation Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability