Known vulnerabilities in Microsoft Office for macOS - page 8

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_office_for_mac:*:*:*:*:*:*:*:*
Total vulnerabilities: 318
Public exploits: 26
Known exploited (KEV): 20
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Office for macOS Microsoft Office for macOS is affected by 318 known vulnerabilities: 19 critical, 214 high, 45 medium, 40 low Critical High Medium Low

Vulnerabilities (318)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138215 - Improper Validation of Specified Type of Input
CVE-2026-55124
CWE-1287 Medium
No
No
16.111.26071215 17.07.2026 SB2026071713
#VU138214 - Untrusted Pointer Dereference
CVE-2026-55138
CWE-822 Low
No
No
16.111.26071215 17.07.2026 SB2026071713
#VU138213 - Heap-based Buffer Overflow
CVE-2026-55041
CWE-122 High
No
No
16.111.26071215 17.07.2026 SB2026071713
#VU138212 - Integer overflow
CVE-2026-55033
CWE-190 High
No
No
16.111.26071215 17.07.2026 SB2026071713
#VU138211 - Use After Free
CVE-2026-55032
CWE-416 High
No
No
16.111.26071215 17.07.2026 SB2026071713
#VU138210 - Heap-based Buffer Overflow
CVE-2026-55049
CWE-122 High
No
No
16.111.26071215 17.07.2026 SB2026071713
#VU138030 - Stack-based buffer overflow
CVE-2026-50387
CWE-121 Low
No
No
16.111.26071215 17.07.2026 SB2026071705
#VU122540 - Reliance on Untrusted Inputs in a Security Decision
CVE-2026-21514
CWE-807 Critical
No
Exploited
16.106.26020821 16.106.26020821 10.02.2026 SB2026021053
#VU118274 - Heap-based Buffer Overflow
CVE-2025-60724
CWE-122 High
No
No
16.103.25110922 16.103.25110922 11.11.2025 SB2025111149
#VU109078 - Heap-based Buffer Overflow
CVE-2025-30388
CWE-122 High
No
No
16.97.25042725 16.97.25042725 13.05.2025 SB2025051390
#VU74968 - Use After Free
CVE-2023-28285
CWE-416 High
Available
No
16.72 23040900 11.04.2023 SB2023041190
#VU74937 - Out-of-bounds write
CVE-2023-28311
CWE-787 High
Available
No
16.72 23040900 11.04.2023 SB2023041179
#VU70970 - Improper input validation
CVE-2023-21735
CWE-20 High
No
No
- 10.01.2023 SB2023011057
#VU70969 - Improper input validation
CVE-2023-21734
CWE-20 High
No
No
- 10.01.2023 SB2023011057
#VU70188 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-44713
CWE-451 Medium
No
No
- 13.12.2022 SB2022121365
#VU70176 - Use After Free
CVE-2022-44692
CWE-416 High
No
No
- 13.12.2022 SB2022121347
#VU69085 - Improper input validation
CVE-2022-41061
CWE-20 High
No
No
- 08.11.2022 SB2022110818
#VU47611 - Security Features
CVE-2020-16933
CWE-254 Medium
No
No
- 13.10.2020 SB2020101357
#VU47583 - Memory corruption
CVE-2020-16929
CWE-119 High
No
No
- 13.10.2020 SB2020101337
#VU46472 - Memory corruption
CVE-2020-1218
CWE-119 High
No
No
- 08.09.2020 SB2020090841


Showing elements 141 - 160 out of 318