Microsoft Office vulnerabilities

CVE-2025-59225 High · 7.8 CWE-416 Oct 14, 2025

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59224 High · 7.8 CWE-416 Oct 14, 2025

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59223 High · 7.8 CWE-416 Oct 14, 2025

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59222 High · 7.8 CWE-416 Oct 14, 2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-59221 High · 7.0 CWE-416 Oct 14, 2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2023-35636 Medium · 6.5 CWE-200 Dec 12, 2023

Microsoft Outlook Information Disclosure Vulnerability

CVE-2023-36761 Medium · 6.5 KEV High · 53 CWE-20 Sep 12, 2023

Microsoft Word Information Disclosure Vulnerability

CVE-2023-23397 Critical · 9.8 KEV High · 66 Public exploit CWE-294 Mar 14, 2023

Microsoft Office Outlook Privilege Escalation Vulnerability

Microsoft Outlook Elevation of Privilege Vulnerability

CVE-2021-42292 High · 7.8 KEV High · 62 Public exploit Nov 9, 2021

Microsoft Excel Security Feature Bypass

Microsoft Excel Security Feature Bypass Vulnerability

CVE-2021-38646 High · 7.8 KEV High · 65 Ransomware Sep 15, 2021

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

CVE-2021-27059 High · 7.6 KEV High · 55 Mar 11, 2021

Microsoft Office Remote Code Execution Vulnerability

CVE-2019-1297 High · 8.8 KEV High · 56 Sep 11, 2019

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

CVE-2019-0541 High · 8.8 KEV High · 64 Public exploit CWE-77 Jan 8, 2019

Microsoft MSHTML Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.

CVE-2018-0852 High · 8.8 CWE-787 Feb 15, 2018

Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1,...

Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Outlook handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0851.

CVE-2018-0851 High · 8.8 CWE-787 Feb 15, 2018

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft...

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.

CVE-2018-0802 High · 7.8 KEV Urgent · 82 Public exploit Ransomware CWE-787 Jan 9, 2018

Microsoft Office Memory Corruption Vulnerability

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.

CVE-2018-0798 High · 8.8 KEV Urgent · 72 Public exploit CWE-787 Jan 9, 2018

Microsoft Office Memory Corruption Vulnerability

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".

CVE-2017-11882 High · 7.8 KEV Urgent · 96 Public exploit Ransomware CWE-119 Nov 15, 2017

Microsoft Office Memory Corruption Vulnerability

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11884.

CVE-2017-11826 High · 7.8 KEV High · 62 Public exploit CWE-119 Oct 13, 2017

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.

CVE-2017-8570 High · 7.8 KEV Urgent · 80 Public exploit Jul 11, 2017

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0243.

CVE-2017-8506 High · 7.8 Jun 14, 2017