Known vulnerabilities in Microsoft Office 2019 - page 3

Vendor: Microsoft
Software: Microsoft Office
Version: 2019
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 517
Public exploits: 22
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Office version 2019 Microsoft Office 2019 is affected by 517 vulnerabilities: 8 critical, 375 high, 83 medium, 51 low Critical High Medium Low

Vulnerabilities (517)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126259 - Use After Free
CVE-2026-32199		 CWE-416 High
No
No
 - 16.04.2026 SB2026041615
#VU126258 - Use After Free
CVE-2026-32198		 CWE-416 High
No
No
 - 16.04.2026 SB2026041615
#VU126257 - Use After Free
CVE-2026-32197		 CWE-416 High
No
No
 - 16.04.2026 SB2026041615
#VU126256 - Use After Free
CVE-2026-32189		 CWE-416 High
No
No
 - 16.04.2026 SB2026041615
#VU126255 - Out-of-bounds read
CVE-2026-32188		 CWE-125 Medium
No
No
 - 16.04.2026 SB2026041615
#VU126243 - Use After Free
CVE-2026-32200		 CWE-416 High
No
No
 - 15.04.2026 SB20260415159
#VU126241 - Use After Free
CVE-2026-32190		 CWE-416 High
No
No
 - 15.04.2026 SB20260415154
#VU123802 - Use After Free
CVE-2026-26107		 CWE-416 High
No
No
 - 11.03.2026 SB2026031105
#VU123799 - Heap-based Buffer Overflow
CVE-2026-26108		 CWE-122 High
No
No
 - 11.03.2026 SB2026031105
#VU123796 - Out-of-bounds read
CVE-2026-26109		 CWE-125 High
No
No
 - 11.03.2026 SB2026031105
#VU123788 - Untrusted Pointer Dereference
CVE-2026-26112		 CWE-822 High
No
No
 - 11.03.2026 SB2026031105
#VU122587 - Deserialization of Untrusted Data
CVE-2026-21511		 CWE-502 Medium
No
No
 - 10.02.2026 SB2026021093
#VU122586 - Exposure of sensitive information to an unauthorized actor
CVE-2026-21260		 CWE-200 Medium
No
No
 - 10.02.2026 SB2026021093
#VU122585 - Out-of-bounds read
CVE-2026-21261		 CWE-125 Medium
No
No
 - 10.02.2026 SB2026021092
#VU122584 - Out-of-bounds read
CVE-2026-21258		 CWE-125 Medium
No
No
 - 10.02.2026 SB2026021092
#VU122583 - Heap-based Buffer Overflow
CVE-2026-21259		 CWE-122 High
No
No
 - 10.02.2026 SB2026021092
#VU122047 - Reliance on Untrusted Inputs in a Security Decision
CVE-2026-21509		 CWE-807 Critical
Public exploit available
Exploited
 - 26.01.2026 SB2026012659
#VU121459 - Untrusted Pointer Dereference
CVE-2026-20948		 CWE-822 High
No
No
 - 14.01.2026 SB20260114105
#VU121457 - Use After Free
CVE-2026-20952		 CWE-416 High
No
No
 - 14.01.2026 SB20260114104
#VU121456 - Use After Free
CVE-2026-20953		 CWE-416 High
No
No
 - 14.01.2026 SB20260114104


Showing elements 41 - 60 out of 517