Known vulnerabilities in Microsoft Word - page 2

Vendor: Microsoft
Software: Microsoft Word
Software CPE: cpe:2.3:a:microsoft:microsoft_word:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 227
Public exploits: 17
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Word Microsoft Word is affected by 227 known vulnerabilities: 18 critical, 150 high, 43 medium, 16 low Critical High Medium Low

Vulnerabilities (227)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148315 - Buffer over-read
CVE-2026-83951		 CWE-126 Medium
No
No
 16.0.5569.1000 09.09.2026 SB2026090916
#VU148314 - Buffer over-read
CVE-2026-83949		 CWE-126 Medium
No
No
 16.0.5569.1000 09.09.2026 SB2026090916
#VU148262 - Out-of-bounds read
CVE-2026-80090		 CWE-125 Medium
No
No
 16.0.5569.1000 09.09.2026 SB2026090916
#VU148257 - Heap-based Buffer Overflow
CVE-2026-80085		 CWE-122 High
No
No
 16.0.5569.1000 09.09.2026 SB2026090916
#VU148252 - Double Free
CVE-2026-80080		 CWE-415 High
No
No
 16.0.5569.1000 09.09.2026 SB2026090916
#VU148251 - Out-of-bounds read
CVE-2026-80079		 CWE-125 Low
No
No
 16.0.5569.1000 09.09.2026 SB2026090916
#VU148243 - Use After Free
CVE-2026-78525		 CWE-416 High
No
No
 16.0.5569.1000 09.09.2026 SB2026090916
#VU148240 - Out-of-bounds read
CVE-2026-78522		 CWE-125 Low
No
No
 16.0.5569.1000 09.09.2026 SB2026090916
#VU148239 - Heap-based Buffer Overflow
CVE-2026-78521		 CWE-122 High
No
No
 16.0.5569.1000 09.09.2026 SB2026090916
#VU148238 - Out-of-bounds read
CVE-2026-78520		 CWE-125 Medium
No
No
 16.0.5569.1000 09.09.2026 SB2026090916
#VU148235 - Heap-based Buffer Overflow
CVE-2026-78517		 CWE-122 High
No
No
 16.0.5569.1000 09.09.2026 SB2026090916
#VU148232 - Use After Free
CVE-2026-78514		 CWE-416 High
No
No
 16.0.5569.1000 09.09.2026 SB2026090916
#VU144543 - Improper input validation
CVE-2026-70105		 CWE-20 Medium
No
No
 16.0.5565.1000 21.08.2026 SB2026082150
#VU141937 - Stack-based buffer overflow
CVE-2026-63527		 CWE-121 High
No
No
 16.0.5565.1000 12.08.2026 SB20260812234
#VU141936 - Out-of-bounds read
CVE-2026-63528		 CWE-125 Medium
No
No
 16.0.5565.1000 12.08.2026 SB20260812234
#VU141934 - Numeric Truncation Error
CVE-2026-63525		 CWE-197 High
No
No
 16.0.5565.1000 12.08.2026 SB20260812234
#VU141847 - Improper input validation
CVE-2026-70318		 CWE-20 Medium
No
No
 16.0.5565.1000 12.08.2026 SB20260812234
#VU141843 - Out-of-bounds read
CVE-2026-70310		 CWE-125 Medium
No
No
 16.0.5565.1000 12.08.2026 SB20260812234
#VU141841 - Use After Free
CVE-2026-70311		 CWE-416 High
No
No
 16.0.5565.1000 12.08.2026 SB20260812234
#VU141801 - Out-of-bounds read
CVE-2026-63521		 CWE-125 Medium
No
No
 16.0.5565.1000 12.08.2026 SB20260812234


Showing elements 21 - 40 out of 227