Known vulnerabilities in Microsoft Word - page 3

Vendor: Microsoft
Software: Microsoft Word
Software CPE: cpe:2.3:a:microsoft:microsoft_word:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 178
Public exploits: 17
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Word Microsoft Word is affected by 178 known vulnerabilities: 18 critical, 125 high, 22 medium, 13 low Critical High Medium Low

Vulnerabilities (178)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107266 - Untrusted Pointer Dereference
CVE-2025-27747		 CWE-822 High
No
No
 - 09.04.2025 SB2025040924
#VU105563 - Use After Free
CVE-2025-24079		 CWE-416 High
No
No
 - 11.03.2025 SB2025031196
#VU105562 - Use After Free
CVE-2025-24078		 CWE-416 High
No
No
 - 11.03.2025 SB2025031196
#VU101593 - Out-of-bounds read
CVE-2024-49065		 CWE-125 Medium
No
No
 - 10.12.2024 SB20241210110
#VU100411 - Improper input validation
CVE-2024-49033		 CWE-20 Medium
No
No
 - 12.11.2024 SB20241112166
#VU86485 - Improper input validation
CVE-2024-20673		 CWE-20 High
No
No
 - 13.02.2024 SB2024021382
#VU86482 - Out-of-bounds write
CVE-2024-21379		 CWE-787 High
No
No
 - 13.02.2024 SB2024021380
#VU80695 - Improper input validation
CVE-2023-36762		 CWE-20 High
No
No
 16.0.5413.1000 13.09.2023 SB2023091301
#VU80655 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36761		 CWE-200 High
No
Exploited
 15.0.5589.1001, 16.0.5413.1000 12.09.2023 SB2023091249
#VU78099 - Improper input validation
CVE-2023-36884		 CWE-20 Critical
Available
Exploited
 - 11.07.2023 SB2023071170
#VU78073 - Security Features
CVE-2023-33150		 CWE-254 High
No
No
 - 11.07.2023 SB2023071162
#VU75939 - Security Features
CVE-2023-29335		 CWE-254 Medium
No
No
 - 09.05.2023 SB20230509125
#VU74937 - Out-of-bounds write
CVE-2023-28311		 CWE-787 High
Available
No
 16.0.10397.20021, 16.0.16227.20280 11.04.2023 SB2023041179
#VU72192 - Memory corruption
CVE-2023-21716		 CWE-119 High
Available
Exploited
 16.0.10395.20020, 16.0.14326.21336, 16.0.14332.20461, 16.0.14931.20926, 16.0.15601.20538, 16.0.15831.20280, 16.0.15928.20282, 16.0.16026.20200 14.02.2023 SB2023021433
#VU69087 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41060		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69086 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41103		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69085 - Improper input validation
CVE-2022-41061		 CWE-20 High
No
No
 - 08.11.2022 SB2022110818
#VU62991 - Security Features
CVE-2022-29107		 CWE-254 Medium
No
No
 - 11.05.2022 SB2022051104
#VU61180 - Improper input validation
CVE-2022-24511		 CWE-20 Medium
No
No
 - 08.03.2022 SB2022030852
#VU59443 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21842		 CWE-94 High
No
No
 - 11.01.2022 SB2022011132


Showing elements 41 - 60 out of 178