Known vulnerabilities in Microsoft Office - page 2

Vendor: Microsoft
Software: Microsoft Office
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 973
Public exploits: 65
Known exploited (KEV): 52
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Office Microsoft Office is affected by 973 known vulnerabilities: 53 critical, 676 high, 146 medium, 98 low Critical High Medium Low

Vulnerabilities (973)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148224 - Improper Null Termination
CVE-2026-78506		 CWE-170 Medium
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148223 - Heap-based Buffer Overflow
CVE-2026-78505		 CWE-122 High
No
No
 16.0.5569.1000, 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148222 - Stack-based buffer overflow
CVE-2026-78504		 CWE-121 High
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148220 - Out-of-bounds read
CVE-2026-78503		 CWE-125 Medium
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148219 - Out-of-bounds read
CVE-2026-78502		 CWE-125 Medium
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148201 - Out-of-bounds read
CVE-2026-77911		 CWE-125 Medium
No
No
 16.0.17932.20960 09.09.2026 SB2026090916
#VU148198 - NULL Pointer Dereference
CVE-2026-77901		 CWE-476 High
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148196 - Heap-based Buffer Overflow
CVE-2026-77898		 CWE-122 Medium
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148122 - Out-of-bounds read
CVE-2026-72977		 CWE-125 Medium
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148121 - Out-of-bounds read
CVE-2026-72976		 CWE-125 Medium
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148120 - Out-of-bounds read
CVE-2026-72975		 CWE-125 Low
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148119 - Buffer over-read
CVE-2026-72974		 CWE-126 Medium
No
No
 16.0.5569.1000, 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148118 - Heap-based Buffer Overflow
CVE-2026-72973		 CWE-122 High
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148117 - Heap-based Buffer Overflow
CVE-2026-72972		 CWE-122 High
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148104 - Untrusted Pointer Dereference
CVE-2026-72956		 CWE-822 Medium
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU148088 - Type confusion
CVE-2026-72938		 CWE-843 Medium
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 09.09.2026 SB2026090916
#VU147959 - Use After Free
CVE-2026-69797		 CWE-416 High
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 08.09.2026 SB2026090916
#VU147946 - Heap-based Buffer Overflow
CVE-2026-69778		 CWE-122 High
No
No
 16.0.5569.1000, 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 08.09.2026 SB2026090916
#VU147936 - Use After Free
CVE-2026-69767		 CWE-416 High
No
No
 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 08.09.2026 SB2026090916
#VU147935 - Heap-based Buffer Overflow
CVE-2026-69764		 CWE-122 High
No
No
 16.0.5569.1000, 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976 08.09.2026 SB2026090916


Showing elements 21 - 40 out of 973