Known vulnerabilities in Microsoft Office 2021

Vendor: Microsoft
Software: Microsoft Office
Version: 2021
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 8
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Office version 2021 Microsoft Office 2021 is affected by 8 vulnerabilities: 2 critical, 4 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122047 - Reliance on Untrusted Inputs in a Security Decision
CVE-2026-21509		 CWE-807 Critical
Public exploit available
Exploited
 - 26.01.2026 SB2026012659
#VU95608 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38200		 CWE-200 Medium
Public exploit available
No
 16.0.5461.1000 08.08.2024 SB2024080870
#VU73511 - Exposure of sensitive information to an unauthorized actor
CVE-2023-23397		 CWE-200 Critical
Public exploit available
Exploited
 - 14.03.2023 SB2023031428
#VU72193 - Out-of-bounds read
CVE-2023-21714		 CWE-125 Low
No
No
 - 14.02.2023 SB2023021434
#VU72192 - Memory corruption
CVE-2023-21716		 CWE-119 High
Public exploit available
Exploited
 - 14.02.2023 SB2023021433
#VU67264 - Memory corruption
CVE-2022-37963		 CWE-119 High
No
No
 - 13.09.2022 SB2022091365
#VU57270 - Improper Validation of Array Index
CVE-2021-40480		 CWE-129 High
No
No
 - 12.10.2021 SB2021101219
#VU57269 - Use After Free
CVE-2021-40481		 CWE-416 High
No
No
 - 12.10.2021 SB2021101219