Known vulnerabilities in Microsoft Word - page 5

Vendor: Microsoft
Software: Microsoft Word
Software CPE: cpe:2.3:a:microsoft:microsoft_word:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 227
Public exploits: 17
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Word Microsoft Word is affected by 227 known vulnerabilities: 18 critical, 150 high, 43 medium, 16 low Critical High Medium Low

Vulnerabilities (227)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114038 - Out-of-bounds read
CVE-2025-53736		 CWE-125 Low
No
No
 - 13.08.2025 SB2025081388
#VU114037 - Use After Free
CVE-2025-53738		 CWE-416 High
No
No
 - 13.08.2025 SB2025081388
#VU112692 - Use After Free
CVE-2025-49699		 CWE-416 High
No
No
 - 09.07.2025 SB20250709110
#VU112472 - Use After Free
CVE-2025-49700		 CWE-416 High
No
No
 - 08.07.2025 SB2025070837
#VU112470 - Use After Free
CVE-2025-49698		 CWE-416 High
No
No
 - 08.07.2025 SB2025070837
#VU112469 - Use After Free
CVE-2025-49703		 CWE-416 High
No
No
 - 08.07.2025 SB2025070837
#VU110999 - Use After Free
CVE-2025-47168		 CWE-416 High
No
No
 - 10.06.2025 SB20250610104
#VU110998 - Heap-based Buffer Overflow
CVE-2025-47169		 CWE-122 High
No
No
 - 10.06.2025 SB20250610104
#VU107266 - Untrusted Pointer Dereference
CVE-2025-27747		 CWE-822 High
No
No
 - 09.04.2025 SB2025040924
#VU107264 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2025-29816		 CWE-349 High
No
No
 - 09.04.2025 SB2025040924
#VU105563 - Use After Free
CVE-2025-24079		 CWE-416 High
No
No
 - 11.03.2025 SB2025031196
#VU105562 - Use After Free
CVE-2025-24078		 CWE-416 High
No
No
 - 11.03.2025 SB2025031196
#VU101593 - Out-of-bounds read
CVE-2024-49065		 CWE-125 Medium
No
No
 - 10.12.2024 SB20241210110
#VU100411 - Improper input validation
CVE-2024-49033		 CWE-20 Medium
No
No
 - 12.11.2024 SB20241112166
#VU86485 - Improper input validation
CVE-2024-20673		 CWE-20 High
No
No
 - 13.02.2024 SB2024021382
#VU86482 - Out-of-bounds write
CVE-2024-21379		 CWE-787 High
No
No
 - 13.02.2024 SB2024021380
#VU80695 - Improper input validation
CVE-2023-36762		 CWE-20 High
No
No
 16.0.5413.1000 13.09.2023 SB2023091301
#VU80655 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36761		 CWE-200 High
No
Exploited
 15.0.5589.1001, 16.0.5413.1000 12.09.2023 SB2023091249
#VU78099 - Improper input validation
CVE-2023-36884		 CWE-20 Critical
Available
Exploited
 - 11.07.2023 SB2023071170
#VU78073 - Security Features
CVE-2023-33150		 CWE-254 High
No
No
 - 11.07.2023 SB2023071162


Showing elements 81 - 100 out of 227