Microsoft Word vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Word: 55 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:word
CVE-2026-55142
Medium · 5.5
CWE-197 Jul 14, 2026
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to…
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55134
High · 7.8
CWE-121 Jul 14, 2026
Stack-based Buffer Overflow in Microsoft 365 Apps
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55132
High · 7.8
CWE-415 Jul 14, 2026
Double Free in Microsoft 365 Apps
Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55130
High · 7.8
CWE-787 Jul 14, 2026
Out-of-bounds Write in Microsoft 365 Apps
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55128
High · 7.8
CWE-416 Jul 14, 2026
Use After Free in Microsoft 365 Apps
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55127
High · 7.8
CWE-122 Jul 14, 2026
Heap-based Buffer Overflow in Microsoft 365 Apps
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55124
Medium · 5.5
CWE-20 Jul 14, 2026
Improper Input Validation in Microsoft 365 Apps
Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55055
High · 7.8
CWE-121 Jul 14, 2026
Stack-based Buffer Overflow in Microsoft 365 Apps
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55050
Medium · 5.5
CWE-125 Jul 14, 2026
Out-of-bounds Read in Microsoft 365 Apps
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-55038
High · 7.8
CWE-121 Jul 14, 2026
Stack-based Buffer Overflow in Microsoft 365 Apps
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55033
High · 7.8
CWE-122 Jul 14, 2026
Heap-based Buffer Overflow in Microsoft 365 Apps
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-55032
High · 7.8
CWE-416 Jul 14, 2026
Use After Free in Microsoft 365 Apps
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45649
High · 7.1
CWE-284 Jun 9, 2026
Office for Android Spoofing Vulnerability
Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally.
CVE-2026-45471
High · 7.8
CWE-822 Jun 9, 2026
Microsoft Word Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-45458
High · 8.4
CWE-416 Jun 9, 2026
Microsoft Outlook and Word Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-44812
High · 7.8
CWE-190 Jun 9, 2026
Windows Graphics Component Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVE-2026-44803
High · 7.8
CWE-190 Jun 9, 2026
Windows Graphics Component Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVE-2026-42832
Medium · 5.5
CWE-284 May 12, 2026
Microsoft Office Spoofing Vulnerability
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
CVE-2026-41101
Medium · 5.5
CWE-284 May 12, 2026
Microsoft Word for Android Spoofing Vulnerability
Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.
CVE-2026-40421
Medium · 4.3
CWE-73 May 12, 2026
Microsoft Word Information Disclosure Vulnerability
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-40367
High · 8.4
CWE-822 May 12, 2026
Microsoft Word Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40366
High · 8.4
CWE-416 May 12, 2026
Microsoft Word Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40364
High · 8.4
CWE-122 May 12, 2026
Microsoft Word Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-40361
High · 8.4
CWE-416 May 12, 2026
Microsoft Outlook and Word Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-35440
Medium · 5.5
CWE-552 May 12, 2026
Microsoft Word Information Disclosure Vulnerability
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.