Vulnerabilidades do Microsoft Word

CVE-2026-45649 Alta · 7.1 CWE-284 09/06/2026

Office for Android Spoofing Vulnerability

Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally.

CVE-2026-45471 Alta · 7.8 CWE-822 09/06/2026

Microsoft Word Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-45458 Alta · 8.4 CWE-416 09/06/2026

Microsoft Outlook and Word Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-44812 Alta · 7.8 CWE-190 09/06/2026

Windows Graphics Component Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

CVE-2026-44803 Alta · 7.8 CWE-190 09/06/2026

Windows Graphics Component Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

CVE-2026-42832 Média · 5.5 CWE-284 12/05/2026

Microsoft Office Spoofing Vulnerability

Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.

CVE-2026-41101 Média · 5.5 CWE-284 12/05/2026

Microsoft Word for Android Spoofing Vulnerability

Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.

CVE-2026-40421 Média · 4.3 CWE-73 12/05/2026

Microsoft Word Information Disclosure Vulnerability

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-40367 Alta · 8.4 CWE-822 12/05/2026

Microsoft Word Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-40366 Alta · 8.4 CWE-416 12/05/2026

Microsoft Word Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-40364 Alta · 8.4 CWE-122 12/05/2026

Microsoft Word Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-40361 Alta · 8.4 CWE-416 12/05/2026

Microsoft Outlook and Word Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-35440 Média · 5.5 CWE-552 12/05/2026

Microsoft Word Information Disclosure Vulnerability

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

CVE-2026-26133 Alta · 7.1 CWE-77 16/03/2026

M365 Copilot Information Disclosure Vulnerability

AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

CVE-2026-21511 Alta · 7.5 CWE-502 10/02/2026

Microsoft Outlook Spoofing Vulnerability

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-20948 Alta · 7.8 CWE-822 13/01/2026

Microsoft Word Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-62562 Alta · 7.8 CWE-416 09/12/2025

Microsoft Outlook Remote Code Execution Vulnerability

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

CVE-2025-62559 Alta · 7.8 CWE-416 09/12/2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-62558 Alta · 7.8 CWE-416 09/12/2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-62555 Alta · 7.0 CWE-416 09/12/2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-59222 Alta · 7.8 CWE-416 14/10/2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-59221 Alta · 7.0 CWE-416 14/10/2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2023-36761 Média · 6.5 KEV Alta · 53 CWE-20 12/09/2023

Microsoft Word Information Disclosure Vulnerability

CVE-2018-0802 Alta · 7.8 KEV Urgente · 76 Ransomware CWE-787 09/01/2018

Microsoft Office Memory Corruption Vulnerability

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.

CVE-2018-0798 Alta · 8.8 KEV Alta · 66 CWE-787 09/01/2018

Microsoft Office Memory Corruption Vulnerability

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".