Known vulnerabilities in Microsoft Word - page 6

Vendor: Microsoft
Software: Microsoft Word
Software CPE: cpe:2.3:a:microsoft:microsoft_word:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 227
Public exploits: 17
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Word Microsoft Word is affected by 227 known vulnerabilities: 18 critical, 150 high, 43 medium, 16 low Critical High Medium Low

Vulnerabilities (227)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75939 - Security Features
CVE-2023-29335		 CWE-254 Medium
No
No
 - 09.05.2023 SB20230509125
#VU74937 - Out-of-bounds write
CVE-2023-28311		 CWE-787 High
Available
No
 16.0.10397.20021, 16.0.16227.20280 11.04.2023 SB2023041179
#VU72192 - Memory corruption
CVE-2023-21716		 CWE-119 High
Available
Exploited
 16.0.10395.20020, 16.0.14326.21336, 16.0.14332.20461, 16.0.14931.20926, 16.0.15601.20538, 16.0.15831.20280, 16.0.15928.20282, 16.0.16026.20200 14.02.2023 SB2023021433
#VU69087 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41060		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69086 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41103		 CWE-200 Medium
No
No
 - 08.11.2022 SB2022110818
#VU69085 - Improper input validation
CVE-2022-41061		 CWE-20 High
No
No
 - 08.11.2022 SB2022110818
#VU62991 - Security Features
CVE-2022-29107		 CWE-254 Medium
No
No
 - 11.05.2022 SB2022051104
#VU61180 - Improper input validation
CVE-2022-24511		 CWE-20 Medium
No
No
 - 08.03.2022 SB2022030852
#VU59443 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21842		 CWE-94 High
No
No
 - 11.01.2022 SB2022011132
#VU58924 - Integer overflow
CVE-2021-43875		 CWE-190 High
No
No
 - 14.12.2021 SB2021121452
#VU57261 - Use After Free
CVE-2021-40486		 CWE-416 High
No
No
 - 12.10.2021 SB2021101216
#VU54803 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-34452		 CWE-94 High
No
No
 - 13.07.2021 SB2021071358
#VU53074 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31180		 CWE-94 High
No
No
 - 11.05.2021 SB2021051109
#VU52143 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28453		 CWE-94 High
No
No
 - 13.04.2021 SB2021041329
#VU49431 - Improper input validation
CVE-2021-1716		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228
#VU49430 - Improper input validation
CVE-2021-1715		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228
#VU48321 - Security Features
CVE-2020-17020		 CWE-254 Low
No
No
 - 10.11.2020 SB2020111057
#VU47611 - Security Features
CVE-2020-16933		 CWE-254 Medium
No
No
 - 13.10.2020 SB2020101357
#VU46472 - Memory corruption
CVE-2020-1218		 CWE-119 High
No
No
 - 08.09.2020 SB2020090841
#VU45533 - Out-of-bounds read
CVE-2020-1583		 CWE-125 Low
No
No
 - 11.08.2020 SB2020081117


Showing elements 101 - 120 out of 227