Known vulnerabilities in Microsoft Word - page 4

Vendor: Microsoft
Software: Microsoft Word
Software CPE: cpe:2.3:a:microsoft:microsoft_word:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 227
Public exploits: 17
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Word Microsoft Word is affected by 227 known vulnerabilities: 18 critical, 150 high, 43 medium, 16 low Critical High Medium Low

Vulnerabilities (227)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138215 - Improper Validation of Specified Type of Input
CVE-2026-55124		 CWE-1287 Medium
No
No
 16.0.5561.1000 17.07.2026 SB2026071713
#VU134244 - Use After Free
CVE-2026-45458		 CWE-416 High
No
No
 - 10.06.2026 SB2026061097
#VU134228 - Type confusion
CVE-2026-45456		 CWE-843 High
No
No
 - 10.06.2026 SB2026061097
#VU134213 - Untrusted Pointer Dereference
CVE-2026-45471		 CWE-822 High
No
No
 - 10.06.2026 SB2026061062
#VU131354 - External Control of File Name or Path
CVE-2026-40421		 CWE-73 Medium
No
No
 16.0.5552.1000 13.05.2026 SB2026051382
#VU131353 - Use After Free
CVE-2026-40366		 CWE-416 High
No
No
 16.0.5552.1000 13.05.2026 SB2026051382
#VU131352 - Type confusion
CVE-2026-40364		 CWE-843 High
No
No
 16.0.5552.1000 13.05.2026 SB2026051382
#VU131351 - Files or Directories Accessible to External Parties
CVE-2026-35440		 CWE-552 Medium
No
No
 16.0.5552.1000 13.05.2026 SB2026051382
#VU131348 - Untrusted Pointer Dereference
CVE-2026-40367		 CWE-822 High
No
No
 16.0.5552.1000 13.05.2026 SB2026051382
#VU131347 - Use After Free
CVE-2026-40361		 CWE-416 High
No
No
 16.0.5552.1000 13.05.2026 SB2026051382
#VU122587 - Deserialization of Untrusted Data
CVE-2026-21511		 CWE-502 Medium
No
No
 - 10.02.2026 SB2026021093
#VU121459 - Untrusted Pointer Dereference
CVE-2026-20948		 CWE-822 High
No
No
 - 14.01.2026 SB20260114105
#VU119495 - Use After Free
CVE-2025-62559		 CWE-416 High
No
No
 - 09.12.2025 SB2025120993
#VU119494 - Use After Free
CVE-2025-62558		 CWE-416 High
No
No
 - 09.12.2025 SB2025120993
#VU119493 - Use After Free
CVE-2025-62555		 CWE-416 High
No
No
 - 09.12.2025 SB2025120993
#VU119490 - Use After Free
CVE-2025-62562		 CWE-416 High
No
No
 - 09.12.2025 SB2025120988
#VU117290 - Use After Free
CVE-2025-59222		 CWE-416 High
No
No
 - 15.10.2025 SB20251015137
#VU117289 - Use After Free
CVE-2025-59221		 CWE-416 High
No
No
 - 15.10.2025 SB20251015137
#VU115123 - Untrusted Pointer Dereference
CVE-2025-54905		 CWE-822 Medium
No
No
 - 10.09.2025 SB2025091011
#VU114039 - Incorrect Conversion between Numeric Types
CVE-2025-53733		 CWE-681 High
No
No
 - 13.08.2025 SB2025081388


Showing elements 61 - 80 out of 227