Known vulnerabilities in Microsoft Word

Vendor: Microsoft
Software: Microsoft Word
Software CPE: cpe:2.3:a:microsoft:microsoft_word:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 178
Public exploits: 17
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Word Microsoft Word is affected by 178 known vulnerabilities: 18 critical, 125 high, 22 medium, 13 low Critical High Medium Low

Vulnerabilities (178)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138239 - Heap-based Buffer Overflow
CVE-2026-55130		 CWE-122 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138238 - Use After Free
CVE-2026-55128		 CWE-416 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138236 - Numeric Truncation Error
CVE-2026-55142		 CWE-197 Medium
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138234 - Stack-based buffer overflow
CVE-2026-55134		 CWE-121 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138228 - Double Free
CVE-2026-55132		 CWE-415 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138227 - Stack-based buffer overflow
CVE-2026-55038		 CWE-121 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138223 - Stack-based buffer overflow
CVE-2026-55055		 CWE-121 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138216 - Heap-based Buffer Overflow
CVE-2026-55127		 CWE-122 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138215 - Improper Validation of Specified Type of Input
CVE-2026-55124		 CWE-1287 Medium
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138212 - Integer overflow
CVE-2026-55033		 CWE-190 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138211 - Use After Free
CVE-2026-55032		 CWE-416 High
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU138209 - Out-of-bounds read
CVE-2026-55050		 CWE-125 Medium
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU134244 - Use After Free
CVE-2026-45458		 CWE-416 High
No
No
 - 10.06.2026 SB2026061097
#VU134228 - Type confusion
CVE-2026-45456		 CWE-843 High
No
No
 - 10.06.2026 SB2026061097
#VU134213 - Untrusted Pointer Dereference
CVE-2026-45471		 CWE-822 High
No
No
 - 10.06.2026 SB2026061062
#VU131354 - External Control of File Name or Path
CVE-2026-40421		 CWE-73 Medium
No
No
 16.0.5552.1000 13.05.2026 SB2026051382
#VU131353 - Use After Free
CVE-2026-40366		 CWE-416 High
No
No
 16.0.5552.1000 13.05.2026 SB2026051382
#VU131352 - Type confusion
CVE-2026-40364		 CWE-843 High
No
No
 16.0.5552.1000 13.05.2026 SB2026051382
#VU131351 - Files or Directories Accessible to External Parties
CVE-2026-35440		 CWE-552 Medium
No
No
 16.0.5552.1000 13.05.2026 SB2026051382
#VU131347 - Use After Free
CVE-2026-40361		 CWE-416 High
No
No
 16.0.5552.1000 13.05.2026 SB2026051382


Showing elements 1 - 20 out of 178