Known vulnerabilities in Microsoft Word - page 2

Vendor: Microsoft
Software: Microsoft Word
Software CPE: cpe:2.3:a:microsoft:microsoft_word:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 178
Public exploits: 17
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Word Microsoft Word is affected by 178 known vulnerabilities: 18 critical, 125 high, 22 medium, 13 low Critical High Medium Low

Vulnerabilities (178)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131348 - Untrusted Pointer Dereference
CVE-2026-40367		 CWE-822 High
No
No
 16.0.5552.1000 13.05.2026 SB2026051382
#VU122587 - Deserialization of Untrusted Data
CVE-2026-21511		 CWE-502 Medium
No
No
 - 10.02.2026 SB2026021093
#VU121459 - Untrusted Pointer Dereference
CVE-2026-20948		 CWE-822 High
No
No
 - 14.01.2026 SB20260114105
#VU119495 - Use After Free
CVE-2025-62559		 CWE-416 High
No
No
 - 09.12.2025 SB2025120993
#VU119494 - Use After Free
CVE-2025-62558		 CWE-416 High
No
No
 - 09.12.2025 SB2025120993
#VU119493 - Use After Free
CVE-2025-62555		 CWE-416 High
No
No
 - 09.12.2025 SB2025120993
#VU119490 - Use After Free
CVE-2025-62562		 CWE-416 High
No
No
 - 09.12.2025 SB2025120988
#VU117290 - Use After Free
CVE-2025-59222		 CWE-416 High
No
No
 - 15.10.2025 SB20251015137
#VU117289 - Use After Free
CVE-2025-59221		 CWE-416 High
No
No
 - 15.10.2025 SB20251015137
#VU115123 - Untrusted Pointer Dereference
CVE-2025-54905		 CWE-822 Medium
No
No
 - 10.09.2025 SB2025091011
#VU114039 - Incorrect Conversion between Numeric Types
CVE-2025-53733		 CWE-681 High
No
No
 - 13.08.2025 SB2025081388
#VU114038 - Out-of-bounds read
CVE-2025-53736		 CWE-125 Low
No
No
 - 13.08.2025 SB2025081388
#VU114037 - Use After Free
CVE-2025-53738		 CWE-416 High
No
No
 - 13.08.2025 SB2025081388
#VU112692 - Use After Free
CVE-2025-49699		 CWE-416 High
No
No
 - 09.07.2025 SB20250709110
#VU112472 - Use After Free
CVE-2025-49700		 CWE-416 High
No
No
 - 08.07.2025 SB2025070837
#VU112470 - Use After Free
CVE-2025-49698		 CWE-416 High
No
No
 - 08.07.2025 SB2025070837
#VU112469 - Use After Free
CVE-2025-49703		 CWE-416 High
No
No
 - 08.07.2025 SB2025070837
#VU110999 - Use After Free
CVE-2025-47168		 CWE-416 High
No
No
 - 10.06.2025 SB20250610104
#VU110998 - Heap-based Buffer Overflow
CVE-2025-47169		 CWE-122 High
No
No
 - 10.06.2025 SB20250610104
#VU107264 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2025-29816		 CWE-349 High
No
No
 - 09.04.2025 SB2025040924


Showing elements 21 - 40 out of 178