Known vulnerabilities in Microsoft Office

Vendor: Microsoft
Software: Microsoft Office
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 852
Public exploits: 65
Known exploited (KEV): 52
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Office Microsoft Office is affected by 852 known vulnerabilities: 53 critical, 609 high, 100 medium, 90 low Critical High Medium Low

Vulnerabilities (852)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138254 - Out-of-bounds read
CVE-2026-55121		 CWE-125 Low
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138253 - Out-of-bounds read
CVE-2026-56195		 CWE-125 Medium
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138252 - Out-of-bounds read
CVE-2026-56192		 CWE-125 Medium
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138251 - Out-of-bounds read
CVE-2026-50665		 CWE-125 Medium
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138241 - Out-of-bounds read
CVE-2026-55139		 CWE-125 Low
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138240 - Use of Uninitialized Resource
CVE-2026-55042		 CWE-908 Low
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138237 - Heap-based Buffer Overflow
CVE-2026-55140		 CWE-122 High
No
No
 16.0.5561.1000, 16.0.5561.1001 17.07.2026 SB2026071713
#VU138235 - Heap-based Buffer Overflow
CVE-2026-55056		 CWE-122 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138232 - Integer overflow
CVE-2026-55057		 CWE-190 Medium
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138220 - Out-of-bounds read
CVE-2026-55035		 CWE-125 Low
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138219 - Heap-based Buffer Overflow
CVE-2026-55129		 CWE-122 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138197 - Out-of-bounds read
CVE-2026-55023		 CWE-125 Low
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138196 - Type confusion
CVE-2026-55022		 CWE-843 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138194 - Use After Free
CVE-2026-55018		 CWE-416 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138191 - Heap-based Buffer Overflow
CVE-2026-55017		 CWE-122 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138190 - Use After Free
CVE-2026-50467		 CWE-416 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138189 - Use After Free
CVE-2026-50314		 CWE-416 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138188 - Heap-based Buffer Overflow
CVE-2026-50301		 CWE-122 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138185 - Use After Free
CVE-2026-47290		 CWE-416 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138183 - Out-of-bounds read
CVE-2026-56193		 CWE-125 Low
No
No
 16.0.5561.1000 17.07.2026 SB2026071713


Showing elements 1 - 20 out of 852